Open-source runtime
Free
Apache 2.0; own infrastructure/provider costs
- Included scope
- Execution library and self-hosted control plane
agentOS
● Identity checkedIn-process agent execution runtime · Official-source review 2026-10-09
Rivet’s agentOS is an execution library providing files, processes, shell and permissioned networking for agents. It uses WebAssembly and V8 isolation in a shared runtime, with host functions, storage mounts and optional full-sandbox connections.
- Category
- In-process agent execution runtime
- Free access
- Apache 2.0 library/self-hosted control plane. Cloud/BYOC, storage, browsers and external model charges require separate pricing.
- API access
- npm library, typed host functions, client/server and React SDKs; Node/Python/Bash execution and registry mounts are documented.
Is agentOS right for you?
A good fit for
Relevant to developers embedding controlled agent tool execution into an existing backend.
Before you choose
Linux infrastructure without nested virtualization. Native binaries/heavy compilation may require mounting a full sandbox. Persistence/sleep and preview URLs depend on configured Rivet Actors/deployment. Hosted S3/Drive/browser access requires provider setup. Claimed cold-start/memory/cost multiples and execution-second figures are comparison benchmarks, not verified managed subscription rates. Library isolation and secret-scoped host functions do not replace application authorization review. BYOC no-egress/security claims untested. No install, untrusted-code execution, host binding or deployment performed.
Workflow and handoff
Run harmless sample code with minimal filesystem/network permissions, inspect limits and host-call boundaries, and test persistence before introducing untrusted tasks.
Pricing and practical limits
Linux infrastructure without nested virtualization. Native binaries/heavy compilation may require mounting a full sandbox. Persistence/sleep and preview URLs depend on configured Rivet Actors/deployment. Hosted S3/Drive/browser access requires provider setup. Claimed cold-start/memory/cost multiples and execution-second figures are comparison benchmarks, not verified managed subscription rates. Library isolation and secret-scoped host functions do not replace application authorization review. BYOC no-egress/security claims untested. No install, untrusted-code execution, host binding or deployment performed.
Review method
Official product evidence reviewed on 2026-10-09; product artwork inspected visually. No hands-on vendor application test was performed. Application performance, security claims and plan enforcement were not independently tested.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| Product workflow | Rivet’s agentOS is an execution library providing files, processes, shell and permissioned networking for agents. It uses WebAssembly and V8 isolation in a shared runtime, with host functions, storage mounts and optional full-sandbox connections. | Facts sourced | 2026-10-09 |
| Pricing and restrictions | Linux infrastructure without nested virtualization. Native binaries/heavy compilation may require mounting a full sandbox. Persistence/sleep and preview URLs depend on configured Rivet Actors/deployment. Hosted S3/Drive/browser access requires provider setup. Claimed cold-start/memory/cost multiples and execution-second figures are comparison benchmarks, not verified managed subscription rates. Library isolation and secret-scoped host functions do not replace application authorization review. BYOC no-egress/security claims untested. No install, untrusted-code execution, host binding or deployment performed. | Facts sourced | 2026-10-09 |
Understand the total cost
agentOS pricing & plans
Cloud / BYOC
Not listed
Deployment-specific rates unconfirmed
- Included scope
- Managed infrastructure or private cloud
Alternatives to agentOS
View all ↗
CopilotKitCopilotKit connects agents to product interfaces through AG-UI, chat and generative UI components, frontend actions and shared state. Developers can use ready-made components or headless APIs, with hosting and enterprise deployment options.
Explore tool
OpenComputerOpenComputer deploys TypeScript agent functions onto managed Linux sessions. It handles model selection, tools, MCP, streaming, schedules and durable sessions that can hibernate and resume.
Explore tool
Swytchcode CLISwytchcode provides a runtime and CLI for AI agents calling business APIs with authentication, validation, retries, idempotency and audit controls. Cloud plans add managed connections, policy rules and optional approval workflows.
Explore toolThe practical questions
Frequently asked questions
Was the application hands-on tested?
No. This listing is based on dated official-source evidence and a visual artwork check. Unconfirmed costs and restrictions are identified explicitly.
What is agentOS used for?
Rivet’s agentOS is an execution library providing files, processes, shell and permissioned networking for agents. It uses WebAssembly and V8 isolation in a shared runtime, with host functions, storage mounts and optional full-sandbox connections.
Does agentOS have a free plan?
Apache 2.0 library/self-hosted control plane. Cloud/BYOC, storage, browsers and external model charges require separate pricing.. This record lists ongoing free access; check the plan limits before starting.
How much does agentOS cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use agentOS through an API?
npm library, typed host functions, client/server and React SDKs; Node/Python/Bash execution and registry mounts are documented.. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Linux infrastructure without nested virtualization. Native binaries/heavy compilation may require mounting a full sandbox. Persistence/sleep and preview URLs depend on configured Rivet Actors/deployment. Hosted S3/Drive/browser access requires provider setup. Claimed cold-start/memory/cost multiples and execution-second figures are comparison benchmarks, not verified managed subscription rates. Library isolation and secret-scoped host functions do not replace application authorization review. BYOC no-egress/security claims untested. No install, untrusted-code execution, host binding or deployment performed.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Official product information
Current official product source read individually; product artwork inspected visually.
Read original source ↗Pricing review
Official product page reviewed for disclosed costs; unverified prices and allowances are identified in the listing.
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.