Files
OpenShell/docs/index.md
T
2026-03-05 18:12:59 -08:00

5.4 KiB

title, description, topics, tags, content
title description topics tags content
page nav card
NVIDIA NemoClaw Developer Guide Get Started NVIDIA NemoClaw
NemoClaw is the safe, private runtime for autonomous AI agents. Run agents in sandboxed environments that protect your data, credentials, and infrastructure.
Generative AI
Cybersecurity
AI Agents
Sandboxing
Security
Privacy
Inference Routing
type
index

NVIDIA NemoClaw

GitHub License PyPI

NemoClaw is the safe, private runtime for autonomous AI agents. It provides sandboxed execution environments that protect your data, credentials, and infrastructure — agents run with exactly the permissions they need and nothing more, governed by declarative policies that prevent unauthorized file access, data exfiltration, and uncontrolled network activity.

Install and Create a Sandbox

NemoClaw is designed for minimal setup with safety and privacy built in from the start. Two commands take you from zero to a running, policy-enforced sandbox.

Prerequisites

The following are the prerequisites for the NemoClaw CLI.

  • Docker must be running.
  • Python 3.12+ is required.

Install the NemoClaw CLI

$ pip install nemoclaw

Create Your First NemoClaw Sandbox

::::{tab-set}

:::{tab-item} Claude Code

$ nemoclaw sandbox create -- claude
✓ Runtime ready
✓ Discovered Claude credentials (ANTHROPIC_API_KEY)
✓ Created sandbox: keen-fox
✓ Policy loaded (4 protection layers active)

Connecting to keen-fox...

Claude Code works out of the box with the default policy. :::

:::{tab-item} Community Sandbox

$ nemoclaw sandbox create --from openclaw

The --from flag pulls from the NemoClaw Community catalog --- a collection of domain-specific sandbox images bundled with their own containers, policies, and skills. :::

::::

The agent runs with filesystem, network, process, and inference protection active. Credentials stay inside the sandbox, network access follows your policy, and inference traffic remains private. A single YAML policy controls all four protection layers and is hot-reloadable on a running sandbox.

For OpenCode or Codex, see the tutorial for agent-specific setup.


Next Steps

::::{grid} 2 2 3 3 :gutter: 3

:::{grid-item-card} Tutorials 🔗 get-started/tutorials/index :link-type: doc

Step-by-step walkthroughs for Claude Code, OpenClaw, and OpenCode with NVIDIA inference.

+++ {bdg-secondary}Tutorial :::

:::{grid-item-card} Security Model 🔗 safety-and-privacy/security-model :link-type: doc

How NemoClaw protects against data exfiltration, credential theft, unauthorized API calls, and privilege escalation.

+++ {bdg-secondary}Concept :::

:::{grid-item-card} Sandboxes 🔗 sandboxes/create-and-manage :link-type: doc

Create, manage, and customize sandboxes. Use community images or bring your own container.

+++ {bdg-secondary}Concept :::

:::{grid-item-card} Safety and Privacy 🔗 safety-and-privacy/index :link-type: doc

Write policies that control what agents can access. Iterate on network rules in real time.

+++ {bdg-secondary}Concept :::

:::{grid-item-card} Inference Routing 🔗 inference/index :link-type: doc

Keep inference traffic private by routing API calls to local or self-hosted backends.

+++ {bdg-secondary}Concept :::

:::{grid-item-card} Reference 🔗 reference/cli :link-type: doc

CLI commands, policy schema, environment variables, and system architecture.

+++ {bdg-secondary}Reference :::

::::

:hidden:

Get Started <self>
get-started/tutorials/index
:caption: Concepts
:hidden:

Overview <about/index>
about/how-it-works
about/release-notes
:caption: Sandboxes
:hidden:

sandboxes/index
sandboxes/create-and-manage
sandboxes/providers
sandboxes/custom-containers
sandboxes/community-sandboxes
sandboxes/terminal
:caption: Safety and Privacy
:hidden:

safety-and-privacy/index
safety-and-privacy/security-model
safety-and-privacy/policies
safety-and-privacy/network-access-rules
:caption: Inference Routing
:hidden:

inference/index
inference/create-routes
inference/manage-routes
inference/connect-sandboxes
:caption: Clusters
:hidden:

clusters/index
clusters/remote-deploy
:caption: Observability
:hidden:

observability/index
observability/logs
observability/health
:caption: Reference
:hidden:

reference/index
about/support-matrix
reference/cli
reference/policy-schema
reference/environment-variables
reference/architecture
:caption: Troubleshooting
:hidden:

troubleshooting/cluster-issues
troubleshooting/sandbox-issues
troubleshooting/provider-issues
troubleshooting/custom-container-issues
troubleshooting/port-forwarding-issues
troubleshooting/getting-more-information
:caption: Resources
:hidden:

resources/index