$ oxygenie up —— self-hosted · multi-model · sandboxed · open-source

Put your Agent
inside your own server

OxyGenie is a private, self-hosted Claude-Agent workspace for small teams. Self-hosted, single-org, multi-user, fully sandboxed — your team runs real, capable agents on its own machines: code execution, internal tools, live preview, all inside sandbox guardrails.

// self-hosted · single-org · multi-user · fully-sandboxed
docker compose upone-command deploy
ARK multi-modelone gateway, many models
per-sessionper-session isolation
[01] concept

Not one more cloud AI assistant —
but an Agent workspace that runs in your own server room.

Public SaaS hands your data, keys and code to someone else. OxyGenie flips it: the image runs on your own server — data stays in, keys stay private, and capability stays full.

The threat model is semi-trusted colleagues, not anonymous attackers — so powerful features (stdio MCP, internal access, code execution) are core, legitimate uses, held by sandbox + warning guardrails rather than banned outright.

01 / self-host

Private by deployment

One-command Docker. Single org, multiple trusted users. The image runs on the machine you choose — works out of the box.

02 / multi-model

One gateway, switch models

Default ARK (Volcengine) gateway; switch GLM / Doubao / MiniMax in one click. The menu only shows models that probe healthy.

03 / sandbox

Per-session sandbox

Per-session config dir + child-process isolation + live preview subdomains. Powerful capability stays inside the guardrails — defense in depth.

[02] features

One workspace, everything you need.

01

Agent Chat

Persistent WebSocket, native session resume, live tool-call visualization — the full Claude-Agent experience.

02

Curated Skills

A team-curated skill set, toggled on the spot. A hand-picked set for your own team — not a public rated marketplace.

03

Artifacts · live preview

Live preview for HTML / React / SVG on dedicated subdomains, spun up on demand and reaped automatically.

04

Knowledge Base

Upload and manage documents as the session knowledge base, so the agent understands your project.

05

Model switching

Pick a model per session, with a backend health board. Send to an unhealthy model and it errors — never a silent fallback.

06

Session · Sandbox

Per-session working dir and config, child-process isolation — users within the org never cross-contaminate.

[03] product

Sessions on the left, output on the right.

// tool calls visible live
// output previews on tap

~/oxygenie/agents/c
model: glm-5.1 · sandbox · live
session · refactor landing
you
Reskin the landing to JumpX, then build.
oxygenie · glm-5.1
On it — updating design tokens and verifying the build —
 bash · sandbox
# runs in an isolated sandbox
$ pnpm build
built in 6.2s · 0 errors
$
[04] models

One gateway, many models, switch at will.

Any Anthropic-protocol model — whatever account or gateway it comes from — is switchable as long as it works. The backend probes; the menu only lists the healthy ones.

GLM-5.1
ark/glm-5.1 · default
healthy · 3.6s
Doubao Seed 2.0 Code
ark/doubao-code · coding
healthy · 5.3s
Doubao Seed 2.0 Pro
ark/doubao-pro · general
healthy · 2.1s
MiniMax
ark/minimax · general
healthy · 3.5s
// configured in .env + admin health board · per-conversation selection · selecting an unhealthy model errors, never a silent fallback
[05] deploy

Clone, and go — it really is that simple.

Optimized for "one-command Docker, works out of the box for a team", not elastic public-SaaS scale. Open-source, MIT, self-hosted — the image runs on your server, and your data and keys stay in your own hands.

 deploy.sh
# three steps to launch
$ git clone github.com/foreveryh/oxygenie
$ cp .env.example .env # add ARK token
$ docker compose up -d
oxygenie up · https://oxygenie.local
$