Computers for AI agents
Burrowbox gives agents persistent little Linux machines: a desktop, a browser that stays signed in, a credential vault and an MCP endpoint. Run one for your own agent, or provision one for every customer of your SaaS. Turn it off, and it comes back exactly as it was.
No card needed · Billed by the minute · Stop any time
Two ways in
The same machines power a single agent or every customer of your product.
Give your agent a real desktop and browser that it keeps from one day to the next.
Your product needs agents that browse, log in and operate apps on behalf of your customers. Burrowbox gives each customer their own machine.
# a machine for your customer "acme"
curl -X POST https://burrowbox.dev/api/machines \
-H "Authorization: Bearer $BURROWBOX_KEY" \
-d '{"name":"acme","size":"tiny","ttlMinutes":60}'What's inside
Each machine is a full, private Linux computer, small enough to run dozens at once.
A quiet little Linux desktop. Agents see it through screenshots and accessibility trees, then click, type and scroll through the same MCP tools.
Each machine has its own persistent browser profile. Cookies, logins and tabs survive restarts, so your agent doesn't start from zero every morning.
Store logins and 2FA secrets in an encrypted vault. The agent asks the machine to log in, and the password never reaches the model.
apt packages, .deb files, AppImages, Flatpaks or a shell script. Whatever the agent installs is still there next time.
Stream the whole desktop, a single app window, or just the browser in real time. Jump in with your own mouse and keyboard whenever you want.
Keep a machine always on, give it 30 minutes, or let it destroy itself when the job is done. You only pay while it runs.
How it works
Pick a size and how long it should stay on. It boots in about a second.
Every machine has its own MCP endpoint and token. Paste one command into Claude Code or any MCP client.
Your agent browses, installs and operates apps. You follow along live from any browser.
# connect Claude Code to one of your machines
claude mcp add --transport http research-bot \
https://burrowbox.dev/api/machines/a1b2c3/mcp \
--header "Authorization: Bearer tmm_…"
# …or let the agent manage machines itself
claude mcp add --transport http burrowbox \
https://burrowbox.dev/mcp \
--header "Authorization: Bearer tmk_…"Persistence
Stop a machine at 6pm and start it at 9am. The same windows are open, the same tabs are loaded, and it's still signed in.
Terminal open, three browser tabs, signed in to your tools, an app installed.
Its whole disk is snapshotted: files, installed apps, the vault and every browser cookie, plus which windows and tabs were open.
It restores in seconds. Windows reopen in place, tabs reload, and you're still logged in.
Pricing
Prepaid credit, no subscription. New accounts start with free credit.
Stopped machines keep their disk for a small hourly fee. When your credit runs out, machines stop and keep their state.
FAQ
A small, isolated Linux computer running in a container: a lightweight desktop, a browser, a credential vault, and a daemon that exposes everything over MCP. It has its own disk that persists until you destroy the machine.
Yes, that's what platforms use Burrowbox for. Create machines through the API with your key (one per customer, or per task), give each customer's agent the token scoped to its machine, and set a schedule so idle machines turn off and keep their state. Usage is metered per machine.
Anything that speaks the Model Context Protocol over HTTP, including Claude Code, Claude Desktop, and custom agents built on an MCP client. Each machine has its own endpoint and a token scoped to that machine only.
They're encrypted on the machine with a key held by the platform, not on the machine's disk. Agents fill login forms with browser_login or vault_type_secret, which inject the secret without ever returning it to the model.
Its entire filesystem is snapshotted (files, installed apps, the vault and browser cookies), along with the list of open windows and tabs. On the next start the snapshot is restored and your windows and tabs reopen where they were. While a machine runs, a save point is also taken every 30 minutes.
Running machines are stopped, and their state is kept. Top up and start them again. Nothing is deleted unless you choose to destroy a machine.
Yes. Open a machine to stream the full desktop, a single app window, or just the browser in real time, and use your own keyboard and mouse at any point.
For your own agent, or for every customer you serve. Running in under a minute.