Isolated LXD container
Every agent runs in its own dedicated LXD Linux container — full OS-level isolation, not a shared process or a chroot. Your container is yours alone.
Your agent runs in its own isolated, backed-up container in the cloud — driven from Telegram, Slack, or your browser, with a real Chrome and your Google Workspace built in.
You talk to your AgentPod in Telegram. It does the work in a real browser inside your own container — signed in as you — and sends the result back to the same chat.
Hold the mic in Telegram and say what you need — no app to install, no console to open. Voice, text, photos, and files all reach your agent the same way.
Every AgentPod runs a real Google Chrome inside your own isolated container. Your agent drives that browser: it opens pages, searches, reads, clicks — the open web, not a scraping API.
Sync the cookies from the browser you are already signed into and the cloud Chrome is signed in as you. Your agent reads the unread thread in Gmail, checks Calendar, opens Drive — as you, with your access.
Findings do not stop at a chat message. Your agent writes them into a real document you can open, edit, and share with your team.
The document lands in the same chat you started in. One thread, start to finish — the work happened somewhere else, but you never had to go there.
From your laptop's identity, to the channel you ask from, to the container that does the work — here is the full path a request takes.
Ask from the web app, Telegram or Slack. Your agent — OpenClaw or Hermes, your choice — drives a cloud Chrome that's already signed in as you, then gets real work done across Gmail, Calendar, Docs, Drive and more.
AgentPod runs OpenClaw, Hermes-AI, and Paperclip inside isolated LXD Linux containers — full OS-level isolation with automatic backups, so security is not something you have to configure yourself.
Every agent runs in its own dedicated LXD Linux container — full OS-level isolation, not a shared process or a chroot. Your container is yours alone.
No cross-tenant traffic, no shared database rows, no shared filesystem. Each container has its own storage, network policy, and resource limits — nothing leaks between users.
Your workspace, files, browser state, and configuration are backed up automatically, so a restart, an upgrade, or a failure never costs you your work.
Every container gets its own subdomain with automatic HTTPS. Traffic and data at rest are encrypted, so nothing between you and your agent is ever sent in the clear.
Start a free 3-day trial in Telegram, or open the web console — no credit card required.