detachbox
Menu

Features

Browser terminalTerminals modeNotificationsPhone and voiceLimits boardRotationAgentsDockerPreviews and filesSnapshotsVaultSSH

Use cases

Overnight refactorsParallel agentsPR factoryAgencies and freelancersLong-running jobsAgents from your phoneTeam subscription limitsStudents and indie hackersDocker services
DocsSecurityEnterprisePricingLog in
Start my box

Keys your agents use and never hold

Connect Sallyport Cloud once. Each box gets its own identity there, with no access until you grant it. Your agent calls Stripe, GitHub or Cloudflare through Sallyport, and the key never enters the box.

Start my boxSee the plans

From $19 a month · Docker and sudo included · Cancel from the dashboard any time

Vault, connected to Sallyport Cloud: each box has its own agent with access to its own services, and the keys never enter the box.

Agents with reach and nothing to leak

  • Nothing worth stealing in the box

    The agent runs with sudo and approvals off and still holds no service keys, only short-lived tokens.

  • Access per box

    The box for client work reaches that client's services and nothing else. You set it in Sallyport, box by box.

  • Risky calls wait for your yes

    A refund, a deploy, a DNS change: calls that need approval wait for your tap, in the dashboard and in your pings.

  • One log of every call

    Sallyport keeps a record of every call each box made and what it asked for.

The details

Powered by
Sallyport Cloud, connected with one sign-in
Per box
Its own Sallyport identity, named detachbox · <box>, created with no access
In the box
A token that lives one hour and renews itself about every 50 minutes
Agent CLIs
Reach Sallyport through its MCP server, registered on the box for you
Approvals
Wait on the Vault page, in Terminals and in your notifications
Access
Granted by you, in Sallyport, service by service

Jobs people run with this

Questions about this

Do I need a Sallyport account?

Yes. Connecting opens Sallyport Cloud, where you sign in or create an account, then brings you back to the dashboard.

Can detachbox read my keys?

Keys live in Sallyport. detachbox creates each box's identity with no access, and only you grant it some, in Sallyport.

Which services can my agents call?

Whatever you connect in Sallyport Cloud, from Stripe and GitHub to Cloudflare and your own APIs.

More of what is on the box

Keys your agents use and never hold

Start a box, hand the agent the job and close the tab. Come back to finished work.

Start my box

Charged when the box starts · Cancel from the dashboard; the box runs to the end of the paid month