Files
OpenShell/docs/index.md
T

7.1 KiB

title, description, topics, tags, content
title description topics tags content
page nav card
NVIDIA NemoClaw Developer Guide Get Started NVIDIA NemoClaw
NemoClaw is the safe, private runtime for autonomous AI agents. Run agents in sandboxed environments that protect your data, credentials, and infrastructure.
Generative AI
Cybersecurity
AI Agents
Sandboxing
Security
Privacy
Inference Routing
type
index

NVIDIA NemoClaw Developer Guide

{bdg-link-secondary}GitHub <https://github.com/NVIDIA/NemoClaw> {bdg-link-primary}PyPI <https://pypi.org/project/nemoclaw/>

NemoClaw is the safe, private runtime for autonomous AI agents. It provides sandboxed execution environments that protect your data, credentials, and infrastructure — agents run with exactly the permissions they need and nothing more, governed by declarative policies that prevent unauthorized file access, data exfiltration, and uncontrolled network activity.

Install and Create a Sandbox

NemoClaw is designed for minimal setup with safety and privacy built in from the start. Two commands take you from zero to a running, policy-enforced sandbox.

Prerequisites

The following are the prerequisites for the NemoClaw CLI.

  • Docker must be running.
  • Python 3.12+ is required.

Install the CLI

$ pip install nemoclaw

Create a Sandbox

::::{tab-set}

:::{tab-item} Claude Code

$ nemoclaw sandbox create -- claude
✓ Runtime ready
✓ Discovered Claude credentials (ANTHROPIC_API_KEY)
✓ Created sandbox: keen-fox
✓ Policy loaded (4 protection layers active)

Connecting to keen-fox...

Claude Code works out of the box with the default policy. :::

:::{tab-item} Community Sandbox

$ nemoclaw sandbox create --from openclaw

The --from flag pulls from the NemoClaw Community catalog --- a collection of domain-specific sandbox images bundled with their own containers, policies, and skills. :::

::::

The agent runs with filesystem, network, process, and inference protection active. Credentials stay inside the sandbox, network access follows your policy, and inference traffic remains private. A single YAML policy controls all four protection layers and is hot-reloadable on a running sandbox.

For opencode or Codex, see the Tutorials for agent-specific setup.


About NemoClaw

Understand what NemoClaw is, how the subsystems fit together, and what is new in the latest release.

::::{grid} 1 1 2 2 :gutter: 3

:::{grid-item-card} NemoClaw Overview 🔗 about/index :link-type: doc

Learn about the safety and privacy model, key capabilities, and use cases for sandboxed agent execution. +++ {bdg-secondary}Concept :::

:::{grid-item-card} How It Works 🔗 about/how-it-works :link-type: doc

Explore the architecture, major subsystems, and the end-to-end flow from cluster bootstrap to running sandbox. +++ {bdg-secondary}Concept :::

:::{grid-item-card} Support Matrix 🔗 about/support-matrix :link-type: doc

Platform requirements, supported providers, agent tools, and compatibility details. +++ {bdg-secondary}Reference :::

:::{grid-item-card} Release Notes 🔗 about/release-notes :link-type: doc

Track what changed in each version. +++ {bdg-secondary}Reference :::

::::

Get Started

Install the CLI, bootstrap a cluster, and create your first sandbox.

::::{grid} 1 1 2 2 :gutter: 3

:::{grid-item-card} About Getting Started 🔗 get-started/installation :link-type: doc

Install the CLI, bootstrap a cluster, and launch your first sandbox in minutes. +++ {bdg-secondary}Get Started :::

:::{grid-item-card} Tutorials 🔗 get-started/tutorials/index :link-type: doc

Create, connect to, and manage sandboxes. Configure providers, sync files, forward ports, and bring your own containers. +++ {bdg-secondary}How To :::

::::

Developer Guides

Configure safety policies, route inference traffic, manage clusters, and monitor agent activity.

::::{grid} 1 1 2 2 :gutter: 3

:::{grid-item-card} Safety and Privacy 🔗 safety-and-privacy/index :link-type: doc

Understand how NemoClaw keeps your data safe and private — and write policies that control filesystem, network, and inference access. +++ {bdg-secondary}Concept :::

:::{grid-item-card} Inference Routing 🔗 inference/index :link-type: doc

Keep inference traffic private by routing AI API calls to local or self-hosted backends — without modifying agent code. +++ {bdg-secondary}How To :::

:::{grid-item-card} Clusters 🔗 clusters/index :link-type: doc

Bootstrap, manage, and deploy NemoClaw clusters locally or on remote hosts via SSH. +++ {bdg-secondary}How To :::

:::{grid-item-card} Observability 🔗 observability/index :link-type: doc

Stream sandbox logs, audit agent activity, and monitor policy enforcement with the NemoClaw Terminal and CLI. +++ {bdg-secondary}How To :::

::::

References

Look up CLI commands, policy schemas, environment variables, and troubleshooting guidance.

::::{grid} 1 1 2 2 :gutter: 3

:::{grid-item-card} Reference 🔗 reference/index :link-type: doc

CLI command reference, policy schema, environment variables, and system architecture diagrams. +++ {bdg-secondary}Reference :::

:::{grid-item-card} Troubleshooting 🔗 troubleshooting/cluster-issues :link-type: doc

Diagnose common issues with clusters, sandboxes, and networking. +++ {bdg-secondary}Troubleshooting :::

:::{grid-item-card} Resources 🔗 resources/index :link-type: doc

Links to the GitHub repository, related projects, and additional learning materials. +++ {bdg-secondary}Reference :::

::::

:hidden:

Get Started <self>
get-started/tutorials/index
:caption: Concepts
:hidden:

Overview <about/index>
about/how-it-works
about/release-notes
:caption: Sandboxes
:hidden:

sandboxes/index
sandboxes/create-and-manage
sandboxes/providers
sandboxes/custom-containers
sandboxes/community-sandboxes
sandboxes/port-forwarding
sandboxes/terminal
:caption: Safety and Privacy
:hidden:

safety-and-privacy/index
safety-and-privacy/security-model
safety-and-privacy/policies
safety-and-privacy/network-access-rules
:caption: Inference Routing
:hidden:

inference/index
inference/create-routes
inference/manage-routes
inference/connect-sandboxes
:caption: Clusters
:hidden:

clusters/index
clusters/remote-deploy
:caption: Observability
:hidden:

observability/index
observability/logs
observability/health
:caption: Reference
:hidden:

reference/index
about/support-matrix
reference/cli
reference/policy-schema
reference/environment-variables
reference/architecture
:caption: Troubleshooting
:hidden:

troubleshooting/cluster-issues
troubleshooting/sandbox-issues
troubleshooting/provider-issues
troubleshooting/custom-container-issues
troubleshooting/port-forwarding-issues
troubleshooting/getting-more-information
:caption: Resources
:hidden:

resources/index