AI-powered website builder that generates a professional site in under a minute and includes tools for content, SEO, and analytics.
52M visits/mo+0.7%#4 Coding & Development
3Popularity
About Paddock
Paddock provides isolated Linux desktops and locked-down sandboxes for AI agents to perform real work. Each agent receives a dedicated Ubuntu XFCE desktop environment with persistent storage, tools, and network controls. Agents can open GUI applications, take screenshots, and interact with the desktop while running on a server under user control. Sandboxes enforce strict network policies, run limits, and snapshot rollback to contain untrusted code. The system runs on a single VPS with Docker and Sysbox for isolation. Users manage boxes via a CLI, HTTP API, TypeScript/Python SDKs, or a web dashboard. Drives can be mounted read-write to one box or read-only to many, and snapshots are saved every minute for recovery. Preinstalled agents include Claude Code, Codex, OpenCode, Pi, Prime, and Kimi, with SSH, SCP, and port forwarding available.
Key features
- Ubuntu XFCE desktop per agent
- Persistent storage and files between runs
- Network allowlist/deny-all controls
- Minute-by-minute snapshots
- CLI, HTTP API, TypeScript/Python SDKs
- SSH, SCP, and port forwarding access
- Read-write or read-only drive mounts
- Preinstalled agents: Claude Code, Codex, OpenCode, Pi, Prime, Kimi
Use cases
- Running untrusted AI agent code in isolated sandboxes
- Testing GUI applications with persistent desktops
- Automating tasks with network-restricted environments
Pros
- Self-hosted on a single VPS
- Persistent desktops and storage for agents
- Network isolation with allowlist/deny-all policies
- Snapshots for rollback and recovery
- Supports GUI applications and screenshots
Cons
- Requires a VPS with Ubuntu or Debian
- No cloud-hosted option
- Limited to Linux-based agents
Frequently asked questions about Paddock
What is Paddock and what does it do?
Paddock provides isolated Linux desktops and locked-down sandboxes for AI agents to perform real work. It offers dedicated Ubuntu XFCE desktop environments with persistent storage, tools, and network controls, allowing agents to open GUI applications, take screenshots, and interact with the desktop while running on a server under user control.
Who should use Paddock?
Paddock is designed for developers, researchers, and teams who need to run untrusted AI agents or code in a secure, isolated environment. It is particularly useful for those who require persistent desktops, GUI application support, and strict network policies for their workflows.
How does Paddock ensure security and isolation?
Paddock enforces strict network policies, run limits, and snapshot rollback to contain untrusted code. It runs on a single VPS with Docker and Sysbox for isolation, and sandboxes can lock the network to deny-all or an allowlist. Snapshots are saved every minute for recovery, and cloud metadata is always blocked.
What tools and interfaces does Paddock provide for managing boxes?
Paddock offers a CLI, HTTP API, TypeScript/Python SDKs, and a web dashboard for managing boxes. Users can create, control, and monitor boxes through these interfaces, with options for SSH, SCP, and port forwarding access.
Can I run GUI applications in Paddock?
Yes, Paddock supports running GUI applications on its Ubuntu XFCE desktop environment. Users can open GUI apps, take screenshots, and interact with the desktop through the provided tools and interfaces.
How do I get started with Paddock?
To get started, install Paddock on a VPS with ports 80 and 443 open using a provided script. Then create a box via the CLI, dashboard, or HTTP API, and hand it to your agent. Detailed instructions are available in the full install guide and documentation.
