Yes. It is an ordinary Linux VM at an ordinary provider and you are root on it. SSH works, Docker works, systemd works, and anything you can apt-get you can install. The curated tools are a starting point, not a boundary.

How is this different from renting a VPS myself?

It is the same class of hardware from the same kind of provider, and a plain VPS is cheaper. What you are buying is the afternoon: the tools installed and kept running, an HTTPS gateway with a certificate, and one login in front of everything instead of a port per tool. If setting that up sounds like a good afternoon, buy the VPS.

Can you get into my machine?

Yes, by SSH, with one key we hold — it is how your dashboard link is re-issued and how faults get fixed. Running vmbox detach as root removes it permanently, with no re-attach; after that the only fix we can apply is a reinstall, which destroys the disk. Your lease and billing carry on unchanged.

What survives a disconnect, and what survives a reboot?

A disconnect changes nothing: the workspace is a persistent session on the machine, and an agent working in it keeps working with the tab closed. A reboot is a real reboot — the gateway and the tools come back on their own because systemd owns them, and an interrupted installation resumes from its last durable checkpoint — but a process of your own that was mid-run starts again when you start it.

A machine your agents can live on.

Behind the link is a real Linux VM with a terminal, a persistent workspace, VS Code, a file manager and the agent CLIs already installed — set up so an agent can keep working while you are gone, and reachable from any browser behind one login.

no setup scripts · no ports to open · ssh still works

https://your-box.beeworkspace.ai

Your machine

VS Code/code/
Terminala real shell
WorkspaceZellij, survives disconnects
File manager/files/
Claude Codein the terminal
OpenCodein the terminal
Codexin the terminal
CodeNomad/nomad/

This is the menu you land on. Every tile opens a tool that is already running on the machine — no install step, and no second password, because the gateway is the only way in.

Each tool, in detail

What each one is, how it arrives on the machine, and what it costs in memory while it runs.

One login, every tool

Every tool's own login is disabled and nothing answers from outside except the HTTPS gateway — the only way in, so the links from your dashboard need no second password.

Survives everything

systemd owns the installation, not an SSH session. Reboot the machine mid-install and it resumes from the last durable checkpoint.

Yours, not a sandbox

Root on a real VM at a real provider. Install what you want, run Docker, point a domain at it and get a real certificate.

What every size includes

Root on a real Linux VM — not a container and not a sandbox.
An HTTPS gateway with a certificate, and one login in front of every tool.
A terminal, a persistent workspace, VS Code, and a file manager in the browser.
The agent CLIs already installed: Claude Code, OpenCode, Codex, CodeNomad.
n8n and OpenClaw pre-downloaded, for the day you want them.
SSH, still working, for when the browser is the wrong tool.

Backups are not on that list, because they are not the same on every size — the pricing table says which sizes include one. There is no uptime guarantee on any size, and model access is billed to you by whoever you use. Sections 5 and 6 of the terms set out the first two.

The technical questions

Do I get root?: Yes. It is an ordinary Linux VM at an ordinary provider and you are root on it. SSH works, Docker works, systemd works, and anything you can apt-get you can install. The curated tools are a starting point, not a boundary.
How is this different from renting a VPS myself?: It is the same class of hardware from the same kind of provider, and a plain VPS is cheaper. What you are buying is the afternoon: the tools installed and kept running, an HTTPS gateway with a certificate, and one login in front of everything instead of a port per tool. If setting that up sounds like a good afternoon, buy the VPS.
Can you get into my machine?: Yes, by SSH, with one key we hold — it is how your dashboard link is re-issued and how faults get fixed. Running vmbox detach as root removes it permanently, with no re-attach; after that the only fix we can apply is a reinstall, which destroys the disk. Your lease and billing carry on unchanged.
What survives a disconnect, and what survives a reboot?: A disconnect changes nothing: the workspace is a persistent session on the machine, and an agent working in it keeps working with the tab closed. A reboot is a real reboot — the gateway and the tools come back on their own because systemd owns them, and an interrupted installation resumes from its last durable checkpoint — but a process of your own that was mid-run starts again when you start it.

The whole security model — what we can see, and what we cannot →

Where the software comes from

Almost none of it is ours. We build the machine, the gateway and the single login in front of everything; the tools themselves are other people's projects, installed on every machine and kept in one place. Here is where each one is actually developed.

Claude Codeanthropics/claude-code
OpenAI Codexopenai/codex
OpenCodeanomalyco/opencodepublished as opencode-ai; the repository moved from sst/opencode
Gemini CLIgoogle-gemini/gemini-cli
Kimi CLIMoonshotAI/kimi-cli
HermesNousResearch/hermes-agent
VS Codecoder/code-serverVS Code packaged to run on a server; the editor itself is Microsoft's
Terminal+zellij-org/zellijthe terminal workspace the persistent session runs in
Quick shelltsl0922/ttydthe program that puts a shell in the browser
File managergtsteffaniak/filebrowserthe file manager, a maintained fork of File Browser
n8nn8n-io/n8n
OpenClawopenclaw/openclaw
CodeNomadNeuralNomadsAI/CodeNomad
Dockermoby/mobythe engine behind the docker command; machines install Ubuntu's build of it

Using one

The documentation is written for somebody who already has a machine: the dashboard card by card, adding an app that is not in the catalogue, getting files off, and what happens when a term ends. It says what the build that ships today does, including where the answer is that you cannot.

Sizes

Pick the one that matches what you want running at once. Every size runs the same software and gives you root. Monthly, or 2 months free on a year — what else is different between them.

Basic
One tool at a time
$13.90 first month, then $23.90/month
First purchase only.Or $239 a year, saving $47.80.
6 vCPU · 12 GB RAM · 200 GB disk
No backupUpdates applied for you
Europe
Configure
Pro
Most popular
Several tools at once
$39.90 first month, then $49.90/month
First purchase only.Or $499 a year, saving $99.80.
8 vCPU · 24 GB RAM · 300 GB disk
No backupUpdates applied for you
Europe · US East · US West · Asia
Configure
Developer
Apps, checks and agents running together
$74.90 first month, then $84.90/month
First purchase only.Or $849 a year, saving $169.80.
12 vCPU · 48 GB RAM · 400 GB disk
Backed upUpdates applied for you
Europe · US East · US West · Asia
Configure
Max
Not constrained unless you make heavy load
$119.90 first month, then $129.90/month
First purchase only.Or $1,299 a year, saving $259.80.
16 vCPU · 64 GB RAM · 500 GB disk
Backed upUpdates applied for you
Europe · US East · US West · Asia
Configure