Hermes Agent, with a computer of its own

An AI agent that works at its own desk.

Give it an errand in the chat or on Telegram. It opens its own browser, does the work and reports back. Watch its screen live, and step in when it asks.

Try it for a day: $5 once, $10 of model credits included, no subscription.

The Cagebox workspace: the agent Otto answers with a table of three Lisbon coworking day passes and its pick; beside it Otto's computer shows a coworking space's day-pass page open in its browser, and the steps it took.
A real workspace. Otto checked three coworking spaces on their own sites, in its own browser.

How it works

Three steps, no setup.

  1. Start your agent

    Pick a plan and give your agent a name. About two minutes later it is awake, with its own computer ready.

  2. Give it an errand

    Write the way you would to a colleague, in the web chat or on Telegram. Attach files, or ask for something every morning.

  3. Get the result

    It works on its computer and comes back with an answer, a table or a file. Every step it took is listed, so you can check.

Its own computer

Not a chatbot. A colleague with a screen you can look at.

Your agent has a desktop with a real browser and the apps it installs. It clicks, fills in forms, works in a spreadsheet and downloads files there — and you can open that screen at any moment and watch it work.

  • A real browser, not a scraper

    Sites see an ordinary browser, so the agent can use the ones you use: suppliers, booking pages, dashboards, your own admin.

  • Watch live

    One click shows its screen as it is right now. When you look away, it keeps going.

  • Take over when it asks

    A sign-in, a code sent to your phone, a CAPTCHA: the agent stops and asks you. Do that one step on its screen, press Done, and it carries on.

Otto's computer panel: the screen shows a coworking day-pass page in its browser; under it the steps the agent took — read the shortlist file, switched browser tabs, read the page.
Otto's desktop: LibreOffice Calc with the three day passes, an Average row and a bar chart of the prices.
Not only a browser. Asked for something to forward, Otto installed LibreOffice Calc on its computer, laid the prices out with an average and a chart, and put the PDF in its Files.
A card in the chat: 'Needs a person — CAPTCHA on google.com. There's a CAPTCHA on the form — please tick I'm not a robot on my screen, then press Done', a picture of the form with the reCAPTCHA checkbox, and the buttons Open computer, Can't and Done.

Waiting for you

It knows when to stop and ask.

A form on the way had a CAPTCHA. Otto didn't try to beat it: it stopped, showed you the page and asked you to tick the box. Open its screen, do that one step — or a sign-in, or a code sent to your phone — press Done, and it carries on from there.

  1. It asks
  2. You step in
  3. Done
  4. It carries on

Where you talk to it

Ask from your desk or from your phone.

The same agent and the same memory, wherever you write from. Start an errand on your laptop, check on it from the train.

Web chat

The workspace: the conversation, its computer and every step side by side. Works on a phone too.

Telegram

Message your agent like a person. It answers there, and writes first when a scheduled task is done.

On Telegram

Remind me at 5 to send the printer our final logo.

Will do. I'll message you here at 17:00 with the file attached.

Private by design

Its own machine, not a shared one.

Every agent runs in its own virtual machine with a private kernel — the isolation cloud providers use to run strangers' code side by side. Built on the open-source Hermes Agent. Details in the security model.

One agent, one machine

Files, browser sessions and history live on your agent's own disk. No other agent can see them.

Keys stay inside

Your model key is stored encrypted and only unlocked inside your agent's machine.

Sleeps, never forgets

Idle, it goes to sleep with everything saved. A message wakes it in about a second, mid-thought.

  • Awake — working
  • Waking up
  • Asleep — your next message wakes it

Pricing

One agent, one computer. Pick how you pay for the thinking.

Every plan includes your agent and its computer. The difference is the AI model: bring your own key, or let credits cover it.

Day pass

One time, for trying. A full day with your own agent and its computer.

$5one time

  • 1 agent for 24 hours, 25 GB disk
  • Its own computer with a browser
  • $10 of model credits included
  • Web chat and Telegram
Try it for a day

Once per account. No subscription. Afterwards your agent's data is kept for 7 days.

Agent + Computer

Your agent on the job every day. Bring your own model key.

$20/ month

  • 1 agent, always on call, 25 GB disk
  • Its own computer with a browser
  • Your key: OpenAI, Anthropic, OpenRouter…
  • Web chat and Telegram
Choose Agent + Computer

Model usage is billed by your provider.

Everything included

Agent + Computer + credits

  • Preview
  • Limited availability

Everything included. No API keys to sort out.

$50/ month

  • Up to $200/month in model credits
  • 1 agent, always on call, 25 GB disk
  • Its own computer with a browser
  • Your own key still works too
Choose all-inclusive

$50 of credits every 7 days: the window opens on your first spend and resets 7 days later.

Preview: covered models and credit terms may change with notice — you can switch to your own key any time.

Credits, plainly. Credits pay for the AI model your agent uses, so you don't need an account with OpenAI or anyone else. The $50 plan includes up to $200 a month of model usage: $50 every 7 days, counted from your first request in each window.

Your own key works everywhere. On any plan you can paste a key from OpenAI, Anthropic, OpenRouter or another provider; that usage is billed by them, not by us. Cancel a subscription any time from Billing.

Questions

Before you start.

Something else? Write to support@cagebox.dev.

What is Cagebox?

Cagebox gives you a Hermes AI agent that has its own computer. You talk to it in a web chat or on Telegram; it does the work on its computer — browsing, filling in forms, writing files — and tells you what it did. There is nothing to install or run.

What can the agent do on its computer?

Anything you would do in a browser and a file folder: look things up, compare prices, fill in and submit forms, download and organise files, keep a spreadsheet up to date. It can also run scripts and work on a schedule — for example, a digest every morning.

Can I watch it work, or take over?

Yes. Open the computer's screen and watch live. When the agent hits something only a person should do — a sign-in, a code sent to your phone, a CAPTCHA — it stops, asks you in the chat, and waits. You do that one step on its screen, press Done, and it carries on.

What are credits?

Credits pay for the AI model your agent thinks with, so you don't need an account with a model provider. They cover the gpt-6.1-sol and gpt-6-luna chat models, and gpt-image-2 when your agent makes images. The Day pass includes $10 of credits. The $50 plan includes up to $200 a month of model usage — $50 every 7 days; each window opens with your first request and resets 7 days later. If you use it all before then, switch to your own key or wait for the reset. Credits work only for your agent and its computer on Cagebox — they aren't a general API balance and have no cash value. The models available for credits can change — we'll give notice, and your own key always works as a fallback.

Can I use my own API key?

Yes, on every plan. Paste a key from OpenAI, Anthropic, OpenRouter or another provider; it is stored encrypted and only unlocked inside your agent's computer. Usage on your own key is billed by that provider, not by Cagebox. You can switch to your own key any time in the agent's settings.

Is my data private?

Each agent runs in its own virtual machine with a private kernel — the same kind of isolation cloud providers use to run strangers' code side by side. Other agents can't see its files, and your keys never leave it in readable form.

What happens when the agent isn't busy?

It goes to sleep, with everything saved to disk. A new message, a scheduled task or you opening its screen wakes it in about a second, exactly where it left off.

What happens after the Day pass?

After 24 hours the agent goes to sleep. Its files, history and computer are kept for 7 days, then permanently deleted. Subscribe within those 7 days and your agent and computer come back with everything intact — only the conversation that was open in memory when the pass ended isn't kept. The Day pass is one time per account and never renews on its own.

Your agent is waiting for its first errand

Hand off the busywork. Keep the decisions.

Get your agentPrivate machine per agent