Every AI agent gets its own copy of your app.

If your app runs on your laptop, it runs in YourBox. Each agent gets a cloud box with your whole local setup running, hot reload, its own database, and logins that work.

Works with Claude Code, Codex CLI, Cursor CLI, and OpenCode.

Demo terminal
$ yourbox up checkout-flow
Ready at checkout-flow.acme.yourbox.dev
$ yourbox up sso-login

One laptop can't hold every agent's copy of your app.

Agents do their best work when they can run the app and check what they changed. One copy fits on a laptop. Several copies fight over ports, databases, and memory.

Three agents on one laptop

32 GB, one set of ports
  • port 3000 is already in use
  • database is locked by another copy
  • JavaScript heap out of memory

The same three in YourBox

A box each, in the cloud
  • checkout-flow.acme.yourbox.dev
  • billing-fix.acme.yourbox.dev
  • search-v2.acme.yourbox.dev

The best engineering teams already give every agent its own environment

Stripe and Ramp each built this for themselves, and both have written about how it works.

Stripe

Engineering blog, February 2026
1,000+pull requests written by its coding agents and merged each week

Stripe's agents run on the same pre-warmed cloud devboxes its engineers use, one box per task. An engineer can start several from Slack and come back to finished pull requests.

Read Stripe's post (opens in a new tab)

Ramp

Engineering blog, January 2026
~30%of pull requests merged to its frontend and backend repos, written by its background agent within a couple of months

Every Ramp session gets a full environment with Postgres, Temporal, and the rest of the stack. Agents check their work with screenshots and live previews, and people outside engineering get the same setup an engineer would.

Read Ramp's post (opens in a new tab)

Both were built by dedicated platform teams. YourBox gives your team the same setup without one.

See how it works

Stripe and Ramp are not affiliated with YourBox. Figures come from their own engineering blogs.

From your repo to a running box for every task

Set it up once. After that, starting a box is one command, and your agents can do it themselves.

yourbox.yamlWritten by the setup agent
app: acme-web
services:
  web:      npm run dev        # :3000, hot reload
  api:      go run ./cmd/api   # :8080
  worker:   npm run worker
  postgres: postgres:16
  redis:    redis:7
seed:       scripts/seed.ts    # synthetic accounts
url:        $BOX_URL           # replaces localhost:3000
check:      npm run smoke      # sign in, pay

The recipe lives in your repo. When the README is out of date, the recipe still reflects what boots.

checkout-flow.acme.yourbox.dev
Acme
Email
ada@acme.test
Card
4242 4242 4242 4242
Pay with
Apple Pay
Team plan$40.00
Tax$8.00
Total$48.00
Pay $48.00 Agent is testing checkout

The same link your agent tests is the one you and your reviewers open.

Add Apple Pay to checkout #482
Opencheckout-flow into main
yourbox commented

This branch is running in its own box. Sign in with your team account to try it.

https://checkout-flow.acme.yourbox.dev

Smoke test passed: sign in, check out, pay
Hibernates after 30 minutes idle
Shuts down when this pull request closes

Reviewers click a link instead of pulling the branch and fighting their own setup.

The parts that usually break, working in every box

Getting an app to start is the easy half. A copy is only useful when you can log in, see realistic data, and finish the flow you're changing.

Its own database, with data worth testing

Every box gets a fresh database seeded from your recipe: test accounts, plans, and feature flags that make the app usable. Nothing comes from production.

Seeded users in the checkout-flow box
usersplanflagsbox
ada@acme.testTeamnew-checkoutcheckout-flow
lin@acme.testTrial, day 13apple-paycheckout-flow
sam@acme.testEnterprisessocheckout-flow
kai@acme.testPast duenonecheckout-flow

Everything that assumed localhost still works

Each box gets a real URL, so the settings that expected localhost come along: app URLs, cookies, login redirects like Google sign-in, and webhooks.

  • App URLhttp://localhost:3000checkout-flow.acme.yourbox.dev
  • Cookieslocalhost.acme.yourbox.dev
  • Google sign-inlocalhost:3000/auth/callbackrelayed to this box
  • Webhooksstripe listen to localhostdelivered to this box

A browser your agent can drive

Agents open the running app, click through the flow they changed, and attach screenshots to the pull request.

  • open /checkout
  • click "Pay $48.00"
  • screenshot added to #482

Your whole stack

Web, API, workers, queues, and databases, across one repo or several.

  • web:3000
  • api:8080
  • workerqueue
  • postgres:5432

Stays working as you ship

The recipe is rechecked whenever main changes. When something breaks it, you get a proposed fix.

  • 9a0c3deCheck passed
  • 8d1e07bNew service found, fix proposed
  • 4f2c91aCheck passed

Sandboxes give your agent a computer. YourBox gives it your app.

A sandbox

  • A clean machine that starts fast
  • Your app still has to be installed and started
  • No seeded data, and logins that expect localhost

A YourBox

  • Your whole app, already running
  • Seeded data and working logins
  • Its own link, with everything that assumed localhost still working

Built for the agents your team already uses

Any agent that runs in a terminal can start, use, and stop boxes. The same commands work from the CLI, through MCP, or over the API, so orchestrators can give every task its own box.

  • Claude Code CLI and MCP
  • Codex CLI CLI and MCP
  • Cursor CLI CLI and MCP
  • OpenCode CLI and MCP
  • Your own scripts API
$ yourbox up checkout-flow
Starting from recipe acme-web
web  api  worker  postgres  redis
Ready at https://checkout-flow.acme.yourbox.dev

$ yourbox exec checkout-flow -- npm test
$ yourbox logs checkout-flow api
$ yourbox down checkout-flow

Designed so your security review is short

Boxes are for building and testing, so they never need anything from production.

Questions from your security team? Email security@yourbox.ai and we'll answer them directly.

  • No production data

    Boxes run on synthetic seed data from your recipe. Nothing is copied from your production databases.

  • Test credentials only

    Payment keys run in test mode, and sign-in uses a development-only OAuth client.

  • Secrets kept apart

    App secrets come from your secrets store and stay separate from your agents' credentials.

  • Private by default

    Every box link requires your team's sign-in. Nothing is public unless you choose to share it.

  • Your cloud, if you need it

    Boxes run in our cloud by default. For teams whose code must stay in their own AWS account, we're setting that up with design partners now.

Questions

Anything else, email hello@yourbox.ai.

What does it cost?

Early access is free for design partners. We'll share pricing well before anything changes, and nothing is charged without your agreement.

What does my app need to work?

If it runs on a laptop with a README or setup scripts, we can usually get it running. Apps that already use Docker Compose are the quickest to set up.

How is this different from a sandbox or a cloud dev environment?

Those give you a machine. YourBox gives you your app running on it at its own link, with seeded data and working logins, and keeps it working as your code changes.

Can people who don't code use a box?

Yes. Anyone on your team can open a box's link in a browser to see a change running, with nothing to install.

Give every agent its own copy of your app.

We're working with a small group of design partners. We'll get your app running for your agents, free, in exchange for 30 minutes of feedback.