OxyGenie is a private, self-hosted Claude-Agent workspace for small teams. Self-hosted, single-org, multi-user, fully sandboxed — your team runs real, capable agents on its own machines: code execution, internal tools, live preview, all inside sandbox guardrails.
Public SaaS hands your data, keys and code to someone else. OxyGenie flips it: the image runs on your own server — data stays in, keys stay private, and capability stays full.
The threat model is semi-trusted colleagues, not anonymous attackers — so powerful features (stdio MCP, internal access, code execution) are core, legitimate uses, held by sandbox + warning guardrails rather than banned outright.
One-command Docker. Single org, multiple trusted users. The image runs on the machine you choose — works out of the box.
Default ARK (Volcengine) gateway; switch GLM / Doubao / MiniMax in one click. The menu only shows models that probe healthy.
Per-session config dir + child-process isolation + live preview subdomains. Powerful capability stays inside the guardrails — defense in depth.
Persistent WebSocket, native session resume, live tool-call visualization — the full Claude-Agent experience.
A team-curated skill set, toggled on the spot. A hand-picked set for your own team — not a public rated marketplace.
Live preview for HTML / React / SVG on dedicated subdomains, spun up on demand and reaped automatically.
Upload and manage documents as the session knowledge base, so the agent understands your project.
Pick a model per session, with a backend health board. Send to an unhealthy model and it errors — never a silent fallback.
Per-session working dir and config, child-process isolation — users within the org never cross-contaminate.
// tool calls visible live
// output previews on tap
Any Anthropic-protocol model — whatever account or gateway it comes from — is switchable as long as it works. The backend probes; the menu only lists the healthy ones.
Optimized for "one-command Docker, works out of the box for a team", not elastic public-SaaS scale. Open-source, MIT, self-hosted — the image runs on your server, and your data and keys stay in your own hands.