OpenHands is meant to be run by a single user on their local workstation. It is not appropriate for multi-tenant
deployments where multiple users share the same instance. There is no built-in authentication, isolation, or scalability.If you’re interested in running OpenHands in a multi-tenant environment, check out the source-available,
commercially-licensed OpenHands Cloud Helm Chart.
Using OpenHands for work? We’d love to chat! Fill out
this short form
to join our Design Partner program, where you’ll get early access to commercial features and the opportunity to provide
input on our product roadmap.
Generally yes, but with important considerations. OpenHands runs all code in a secure, isolated Docker container
(called a “sandbox”) that is separate from your host system. However, the safety depends on your configuration:What’s protected:
Your host system files and programs (unless you mount them using this feature)
Host system resources
Other containers and processes
Potential risks to consider:
The agent can access the internet from within the container.
If you provide credentials (API keys, tokens), the agent can use them.
Mounted files and directories can be modified or deleted.
Network requests can be made to external services.
OpenHands comes with a basic runtime environment that includes Python and Node.js.
It also has the ability to install any tools it needs, so usually it’s sufficient to ask it to set up its environment.If you would like to set things up more systematically, you can:
Use setup.sh: Add a setup.sh file file to
your repository, which will be run every time the agent starts.