Rig gives each coding agent a Linux desktop in the cloud with your code, a running dev server, tests and a signed-in Chrome, so your laptop stays fast and you can run many agents at once.
Watch the 45-second demo (with sound)
Setup · Logins · Repos · Saved desktops · Computer use · Quick start · Manage · Security · FAQ · Docs
Claude Code, Cursor or Codex keeps editing code on your laptop. The heavy work runs in its cloud desktop, which sleeps when nobody uses it and wakes in about two seconds.
One coding agent barely uses your laptop. What freezes it is everything around the agent: a dev server per branch, a Chrome for checking the UI, and test runs. Two or three tasks in, a 16 to 24 GB laptop starts swapping.
Rig moves that work into one cloud desktop per branch. Your laptop runs only the agents.
| Sleeps when idle | A cloud desktop pauses after 15 quiet minutes with everything still running inside. It costs nothing while paused and wakes in about two seconds. |
| Starts signed in | One command copies your logins from Chrome, Arc, Edge, Brave, Firefox or Safari. Every new cloud desktop starts with them. |
| Computer use and MCP | Your agent can see the whole screen and click, type and press keys, like Claude's computer use. rig mcp gives Claude Code these as native tools that return screenshots. |
| You can take over | Open the desktop's screen in any browser tab to finish a login or type a 2FA code. It is the same Chrome the agent drives. |
| No push needed | rig sync sends your local edits, committed or not. |
| Your whole toolbelt | Node, Bun, Python, Playwright, Puppeteer, the Vercel, Cloudflare, Railway, Fly, AWS, Google Cloud, GitHub and Stripe CLIs, Claude Code, Codex and more. |
| Private by default | Ports are never public, your API key never touches the repo you work in, and cookie values are never printed. |
| Built for many | Filters and bulk actions work across thousands of cloud desktops, and one command cleans up the stale ones. |
Stills from the demo video. Every command in it ran for real on a real cloud desktop.
 Every agent gets its own desktop. Five branches run side by side. |
 One command starts the app. rig up copies the code, installs and runs it. |
 The agent checks its own work. rig shot saves a screenshot to your laptop. |
 You can step in. rig desktop opens the screen for a 2FA code. |
 It uses the whole screen. Claude Code clicks and types through rig mcp. |
 It sleeps for free. It woke in 1.9 seconds with the same dev server still running. |
Two real screenshots, taken with Rig:
 The cloud desktop's screen, as you see it in a browser tab with rig desktop: Chrome, and the tools every cloud desktop comes with. |
 What your agent sees with rig shot: the cloud desktop's Chrome, saved to your laptop. This fresh desktop is not signed in yet. |
rig upgives this branch a cloud desktop. It copies your code in, installs packages and starts the dev server.rig syncsends your local edits to it.rig execruns tests there, andrig browserdrives its signed-in Chrome.rig desktoplets you see and control its screen.rig savemakes a signed-in cloud desktop your default desktop, so every new one starts as a copy of it.
In the CLI, a cloud desktop is called a box.
Setup takes about 20 minutes, most of it waiting for the image to build. You need Bun 1.2+ and an E2B account. The full walkthrough is in the setup guide.
1. Install Rig
npm install -g @shadowwalker2014/rig # or: bun add -g @shadowwalker2014/rig
rig help # every command; `rig help <command>` for one2. Add your E2B key
rig login # macOS: the Keychain asks for the key, so it never shows on screenNot on a Mac? Copy .env.example to ~/.config/rig/.env, run chmod 600 on it, and set RIG_E2B_API_KEY.
3. Build the image (once, about 10 minutes)
rig image build4. Sign in to your tools
rig cookies push # your browser's logins, except banking and paymentsFor command-line tools, sign in inside a cloud desktop, then save it:
rig new # an empty cloud desktop; prints its id
rig desktop <id> # open the link; sign in to Google, `gh auth login`, `vercel login`…
rig save <id> # every new cloud desktop now starts signed in
rig saved # your saved desktops; * is the one new boxes start fromKeep 1Password signed out in a desktop you save. A saved desktop is stored with E2B, and a signed-in 1Password in it would put your vault session there too.
5. Teach your coding agent
rig skill install # Claude Code6. Check everything
rig doctor # every line should start with ✓Sign in to anything in the browser you already use, then copy those logins into your cloud desktops. Run it again whenever you sign in to something new.
| Command | What it copies |
|---|---|
rig cookies push |
Every site except banking and payments. Google, GitHub, email and everything else go. |
rig cookies push --all |
Every site, banking and payments too. You confirm at the terminal first. |
rig cookies push --site github.com,linear.app |
Only those sites |
rig cookies push --skip notion.so |
The default set, minus the sites you list |
| Add | To |
|---|---|
--from arc or --from chrome:Work |
Use another browser or profile |
-b <box> |
Update one cloud desktop instead of your default desktop |
See what is there first. Neither command reads a cookie value or asks for access:
rig cookies browsers # Chrome, Edge, Brave, Arc, Comet, Chromium, Vivaldi, Opera, Firefox, Safari
rig cookies sites --from chrome # each site's cookie count, and which ones stay out by defaultHow it stays safe:
- Rig prints only site names and counts, never a value.
- Cookies are decrypted in memory and sent over E2B's encrypted connection straight into the cloud desktop's Chrome.
- For Chrome-family browsers, macOS asks you to approve access each time. Click Allow, not Always Allow.
--allrefuses to run from an agent or script. Banking and payment sessions stay on your laptop unless you ask for them.
Some sites refuse a login copied from another computer, and Google accounts do. For those, sign in once inside the cloud desktop with rig desktop, then run rig save. Details are in docs/cookies.md.
cd my-repo
rig up # the first time, it works out how the repo runs and asks about env filesThe first rig up in a repo runs rig init. It detects the package manager, the dev command and its port, and asks before copying gitignored env files like .env.local into the box. The answers go in a small rig.json, and rig status shows the settings in use. If the box can't read a private repo, rig up stops before anything slow and prints the exact fix. Details are in using Rig in a repo.
{ "setup": "bun install", "dev": "bun run dev", "port": 3000, "copy": [".env.local"], "submodules": true }
cd my-repo
rig up # this branch's cloud desktop, with the dev server running
rig sync # after editing locally
rig exec -- bun test # any command, in its copy of the repo
rig exec -- 'bunx tsc --noEmit && bun run lint'
rig browser -- open http://localhost:3000 # drive its signed-in Chrome
rig browser -- snapshot -i # the page's buttons and fields, for an agent
rig shot # screenshot to a local file
rig port 3000 # open its app at http://localhost:3000 on your laptop
rig logs # the dev server's outputRunning parallel agents on one branch? rig up --new gives each its own cloud desktop. Pass -b <id> to the other commands.
rig desktop <box> # or just `rig desktop` inside a repoRig prints a private link. Open it in any browser tab to see and control the cloud desktop's screen: finish a login, type a 2FA code, or watch the agent work.
- It stays awake while you use it. The cloud desktop does not sleep while the tab is open, and sleeps 15 minutes after you close it.
- The link keeps working after the terminal or agent that opened it has gone.
rig desktopagain prints the same link, andrig desktop --stopcloses it. - Copy and paste go through the clipboard panel on the left edge of the view.
- It is private. The link works only on your machine, and asks for a one-time password it already carries.
Set up a cloud desktop once, sign in and install what you need, then save it. Every new cloud desktop starts as a copy of your default saved desktop: its files, its logins and its already-running Chrome.
| Command | Does |
|---|---|
rig save <box> |
Save this box as your default desktop, or update it |
rig save <box> --as work |
Save it under another name; add --use to make it the default |
rig saved |
List saved desktops; * marks the default |
rig saved use work |
New boxes now start from work |
rig new --from work |
Start one box from work without changing the default |
rig saved rm work |
Delete a saved desktop |
rig status |
The default, running and paused boxes, and this branch's box |
Rig reminds you to save. Closing rig desktop on a clean box prints the rig save command, and rig doctor flags a missing default.
Save a clean cloud desktop made with rig new. Rig refuses to save one that ran a repo's code, because that code could have planted something that would spread to every cloud desktop started from it.
Your agent can use the whole cloud desktop, not only its Chrome. It can take a screenshot, click, type, press keys, scroll and drag. These are the same actions as Claude's computer-use tool, for things outside a web page: a terminal window, a system dialog, a browser extension or a file picker.
rig screen # screenshot the desktop; prints the file path
rig click 640 88 # click at a point in that screenshot
rig type "hello" # type into whatever has focus
rig key ctrl+l # press keys: Enter, Tab, ctrl+shift+t, cmd+a…
rig zoom 0 0 400 200 # a 2x close-up, for small textFor Claude Code, add Rig as an MCP server. Claude then gets computer, browser, shell and boxes tools and sees screenshots directly as images:
claude mcp add rig -- rig mcpUse rig browser for anything inside a web page. It reads the page's structure, so it is faster and more reliable than clicking pixels. More in computer use.
Rig ships with an agent skill. It tells your coding agent to run dev servers, tests and browser checks in its cloud desktop instead of on your laptop, and how to hand the screen to you for a login.
rig skill install # Claude Code
npx skills add ShadowWalker2014/rig # Claude Code, Cursor, Codex, opencode and more
rig guide # the same instructions, for any other agent's AGENTS.mdEvery command also explains itself: rig help <command>.
Paste this into a fresh Claude Code (or any agent) session, inside the repo you want to work on:
Use Rig (https://github.com/ShadowWalker2014/rig) to run this repo in a cloud desktop
instead of on my laptop. Keep editing code locally; run the heavy work in the cloud.
1. Run `rig guide` and follow it. Run `rig help <command>` whenever you are unsure.
2. Start this branch's cloud desktop with `rig up`. The first time in this repo it runs
`rig init`. Ask me before copying any env file.
3. After every edit, run `rig sync`. Run tests with `rig exec -- <command>`.
4. Check the UI with `rig browser -- open http://localhost:<port>`, `rig browser -- snapshot -i`
and `rig shot`. Read logs with `rig logs`.
5. If a site needs a login or a 2FA code, run `rig desktop` and give me the link.
If a site rejects the cloud login, ask me to sign in to Chrome on my laptop,
then run `rig cookies push --site <site>`.
6. For anything outside a web page, use `rig screen`, `rig click`, `rig type` and `rig key`.
7. Never run `rig save`, `rig kill` or `rig cookies push --all` without asking me first.
8. When you finish, run `rig pause`.
The same instructions ship with Rig: rig skill install adds them as a Claude Code skill, and rig guide prints them.
rig ls # every cloud desktop: state, repo, branch, last used
rig ls --state running # what is costing money right now
rig pause --all # stop the meter on everything
rig prune # preview: paused cloud desktops unused for 7 days
rig prune --merged --yes # delete those, plus ones whose branch is gone
rig kill --repo acme/web --state paused --yes
rig doctor # key, image, default desktop and settings- Clean-up is automatic. Once a day,
rig upandrig newdelete Rig's own boxes that have been paused and unused for 7 days. SetRIG_AUTO_PRUNE_DAYSto change that, or0to turn it off. - Filters stay fast.
--state,--older-than 7d,--repo,--branch,--hereand--allrun on E2B's side, so they stay fast with thousands of cloud desktops. A filtered delete previews first and only deletes with--yes. - Rig is free. You pay E2B for running time: about $0.46 an hour for 4 CPUs / 16 GB at E2B's rates. Paused cloud desktops cost nothing. More in cleanup and scale.
Ubuntu 24.04 with an Xfce desktop and Google Chrome, plus:
| Area | Tools |
|---|---|
| JavaScript | Node 24, npm, bun, pnpm |
| Deploy and cloud | vercel, wrangler, railway, fly, aws, gcloud, gh, stripe, e2b |
| AI coding agents | claude, codex, opencode |
| Browsers and testing | Chrome with the 1Password extension, Playwright with Chromium, Puppeteer, agent-browser |
| Passwords | 1Password CLI (op) and Chrome extension. Sign in through rig desktop when a task needs it, and don't save a signed-in 1Password. |
| Python and media | python, pip, uv, whisper, ffmpeg, ImageMagick |
| Databases and everyday | psql, redis-cli, sqlite3, git, git-lfs, jq, ripgrep, tmux, Homebrew |
Add your own tools with a script at ~/.config/rig/image.sh. See the box image.
Set these in your shell or in ~/.config/rig/.env (see .env.example):
| Setting | Default | Meaning |
|---|---|---|
RIG_E2B_API_KEY |
Keychain, after rig login |
Your E2B API key |
RIG_E2B_DOMAIN |
e2b.app |
Only for self-hosted E2B |
RIG_IDLE_MIN |
15 |
Minutes without a Rig command before a cloud desktop pauses |
RIG_AUTO_PRUNE_DAYS |
7 |
Days a paused box may sit unused before rig up or rig new deletes it; 0 turns it off |
RIG_BOX_CPU / RIG_BOX_MEMORY_MB |
4 / 16384 |
Size, set when the image is built |
RIG_DEFAULT_DESKTOP / RIG_BASE_TEMPLATE |
rig-default / rig-base |
Names of your default desktop and image in E2B |
- Your E2B key never touches the repo you work in. Rig reads it from your shell, a private settings file or the Keychain, and starts with its own empty settings, so a repo's
.envorbunfig.tomlnever loads. - A hostile repo cannot reach your laptop through Rig. Its git settings cannot run programs, and no path, symlink or
rig.jsonentry can upload a file from outside the repo. - Ports are private.
rig portandrig desktopserve them on your laptop's127.0.0.1only and refuse requests started by other websites. The desktop also has a one-time password. - Cookie values are never printed, and banking and payment sessions stay out unless you ask.
- Your default desktop is shared by every new cloud desktop. Keep money-moving and production-write accounts out of it.
Full details are in docs/security.md. Found a vulnerability? Please open a private security advisory.
What is Rig?
Rig is open-source cloud desktops for AI agents. Each git branch gets a Linux desktop in the cloud with a dev server, tests and a signed-in Chrome, so AI agents can work in parallel without overloading your laptop. The agent still runs locally; Rig moves only the heavy processes.
Does Rig work with Claude Code, Cursor, Codex and other agents?
Yes. Any agent that can run shell commands can use Rig. rig skill install adds a Claude Code skill, npx skills add ShadowWalker2014/rig installs it for other agents, and rig guide prints the instructions for anything else.
How do I get my existing logins into a cloud desktop?
Run rig cookies push. It copies your browser's logins, except banking and payment sites, into your default desktop, so every new cloud desktop starts signed in. Use --site to pick sites or --all to include everything.
How is Rig different from Claude Code on the web, GitHub Codespaces or Daytona?
Claude Code on the web runs the whole agent in the cloud and starts every session without your logins. Codespaces loses running processes when it stops. Rig keeps the agent on your laptop, keeps each cloud desktop's memory while paused, starts every one already signed in, and lets you take over the browser.
How much does it cost?
Rig is free and MIT licensed. You pay E2B for running time: about $0.46 an hour for a 4 CPU / 16 GB cloud desktop at E2B's published rates. Paused ones cost nothing.
Does the dev server think it is running on localhost?
Yes. It sees Host: localhost:<port>, so dev-origin checks and OAuth redirect callbacks behave as on a laptop. Providers that POST back from their own site (like Sign in with Apple's form_post) are blocked by Rig's cross-site protection; finish those through rig desktop.
Does Rig work on Linux or Windows?
The CLI runs anywhere Bun runs; use ~/.config/rig/.env for your key on Linux. Copying browser logins works on macOS. Windows is untested.
Why E2B?
E2B combines what Rig needs: pausing with memory kept, waking on traffic, snapshots of a running machine that start many new ones, private ports, and machines big enough for a real dev server.
| Read | For |
|---|---|
| Setup guide | First-time setup, step by step |
| Using Rig in a repo | rig up, rig init, rig.json, env files, private repos |
| Bring your logins | Copying sign-ins from your browser, and how it stays safe |
| Command reference | Every command, flag and example |
| Computer use | rig screen, click, type, key and the rig mcp server for Claude Code |
| How it works | Lifecycle, syncing, the default desktop, the proxy, the code map |
| Cleanup and scale | Costs, auto-pause, prune, bulk actions |
| The box image | Installed tools, adding your own, size |
| Security | How your key, logins and laptop are protected |
| Contributing | Code map, tests and safety rules |