THE BEST SELF-HOSTEDAI SOFTWARE ENGINEER

Orchestrate a fleet of cloud coding agents in all of the apps your team already lives in.

Open Dashboard 🚀Docs & Guide Star on GitHub★

shiba-orchestrator/task-SCO-15215

Example workflow

ORCHESTRATION PIPELINE · TASK: FIX SIGN-UP FORM DATA & APPROVAL GATESILLUSTRATIVE RUN · SAMPLE DATA

⚡

Captain: Spec & Parallel DelegationPlanning Active

00:00.12

Deconstructed issue #15215: Booting isolated Sandbox microVM, applying patch to src/auth/handler.ts, delegating regression test sweep to Build Agent.

🔨

Build Agent: Cloudflare Sandbox MicroVMstandard-1 VM

Booted in 340ms

- const user = await db.query('SELECT * FROM users WHERE id = ?', [rawId]);

+ const user = await db.query('SELECT * FROM users WHERE id = ?', [validatedId]);

+ await auditLogger.record({ action: 'APPROVAL_GATE_VERIFIED', runId });

✓

Review Agent: Multi-Pass Verification & Visual QA

APPROVED ✓

Typecheck: clean · Vitest: 32 test files passed (397/397) · Egress Security: 0 secrets leaked · GitHub PR #546 ready to merge.

$ validate task
✓ Task approved
$ run coding harness
✓ Patch collected
$ run checks
✓ Example run ready for review

Isolated MicroVM|Egress Filter: MASKED|Runtime: Cloudflare Workers + Sandbox

Dashboard setup→

BUILT ON MODERN OPEN SOURCE & CLOUDFLARE RUNTIMES

Cloudflare WorkersSandbox Micro-ContainersOpenCode InterpreterClaude Code AdapterCodex RuntimeReact 19 DashboardAstro StarlightTypeScript 5.9397/397 Vitest TestsCloudflare AI GatewayCloudflare WorkersSandbox Micro-ContainersOpenCode InterpreterClaude Code AdapterCodex RuntimeReact 19 DashboardAstro StarlightTypeScript 5.9397/397 Vitest TestsCloudflare AI Gateway

USE CASES

From clearing hundreds of tickets at once to running security audits on a schedule.

Deploy on Cloudflare→

Browser & TerminalSFX: *CLICK*

E2E TESTING

Take your agent runs end to end with native computer use, browser use and annotated videos.

chromium:test-sandbox

✓ 32 test specs completed in 1.4s

✓ Recorded DOM diff & visual artifacts

"TESTS PASS!" Shiba E2E Inspector

Slack to PRSFX: *PING*

BUG TRIAGE AND FIX

Slack @mention to reproduced bug, fixed PR, and passing test suite.

Llisa2:47 PM

@Coworker can you help me with this bug in sign-up form data?

APPCoworker Bot

Sniffing the air... SCO-15215 reproduced! Patch ready in PR #546.

"PATCH READY!" Shiba Bug Hunter

Multi-Pass QADOOM!

CODE REVIEW

Automated diff critique, architectural sanity checks, and security scan before merge.

Security: Egress Masking

Syntax & Type Checking

Verdict: 100% Approved

"INSPECTED!" Shiba Review Inspector

Mass RefactorsHEAVE-HO!

MIGRATION & REFACTOR

Burn down tech debt and run bulk refactors across multiple repositories in parallel.

React 18 → React 19

0 / 100 modules upgraded

"85% UP!"

Zero MarkupKEYS UNLOCKED!

BRING YOUR OWN KEY (BYOK)

Connect your own Anthropic, OpenAI, or Google API keys through Cloudflare AI Gateway with zero middleman markup.

Claude 3.7· 140ms

OpenAI GPT-5· 185ms

Gemini 2.5 Flash· 95ms

"STORED BYOK"

Cron & WebhooksTICK TOCK!

AUTOMATIONS

Trigger on schedule or webhook. Nightly dependency updates, flaky test triage, and lint sweeps.

Cron: 0 3 * * *Active

Nightly vulnerability sweep & package lock reconciliation across all worktrees.

Next tick: 02:45:12Status: Idle

FEATURES FOR A MODERN DEV TEAM

Plan and execute complex engineering tasks, from code migrations to on-call incident resolution.

Terminal-Bench & SWE-bench

WORLD CLASS HARNESS PERFORMANCE

Built for long-horizon tasks. Ephemeral microVMs boot in milliseconds with full shell, git, and language toolchains without host environment contamination.

340ms

MicroVM Boot Time

100%

Egress Isolation

Zero

Host Pollution

Automated Test Suites397 / 397 PASS (100%)

32 test files covering egress, harnesses, slack, git, and DO runtime

Micro-Container Spinup~340ms (gVisor Sandbox)

Ephemeral container server with zero host filesystem contamination

Static Typecheck & Lint0 Errors / 0 Warnings

Strict TypeScript 5.9 with ESLint flat config validation

01. Approval-Gated

Every tool execution, file modification, and egress communication passes through strict cryptographically verified approval gates. Zero unauthorized actions.

02. Micro-Containers

Cloudflare Sandbox microVMs boot in 340ms, providing pristine isolated environments with full Docker toolchains and egress secret masking.

03. Issue Triage

Automated bug reproduction from Slack alerts and GitHub issues. Reproduces bugs in sandbox, drafts verified patches, and opens clean pull requests.

SFX: holy music ✦

"IT'S THE HOLY QUADRINITY... MY GOD... IT'S REAL!!!"

From Slack discussions to GitHub pull requests and isolated Cloudflare Sandboxes. Everything syncs in real-time.

ChatOps

#dev-triageSlack Bot

@Coworker fix login crash in staging

PR #546 opened · 397 pass

ApproveReject

SLACK

Chat directly with Shiba in channels. Trigger tasks, review diffs, and click Approve right in Slack threads.

/shiba-ai-coworker fix & review→

Automated PR

PR #546Open

fix(auth): approval gates

✓ 397 checks passed+34 -12

GITHUB

Automated PR creation, branch management, commit hygiene, and webhook event processing.

Webhooks & Bot App→

MicroVM

sandbox-worker-01Active

Boot: 340msRAM: 1GB

Egress: Proxy Masked

Zero host contamination

CLOUDFLARE SANDBOX

Ephemeral micro-containers boot in milliseconds. Execute untrusted scripts with egress boundary proxies.

MicroVM Isolation→

HTTP API

GET/api/runs

POST/api/tasks

POST/slack/events

REST & CLI API

Headless triggers for CI/CD pipelines, custom GitHub actions, and automated scheduled workflows.

HTTP API reference→

THE AGENT HARNESS

Built for multi-agent execution loops with zero risk of rogue commands reaching your local environment.

RUNNER 01

OPENCODE RUNNER

OpenCode binary runs natively inside the Cloudflare Sandbox container, executing edits and test suites in rootless isolation.

RUNNER 02

CLAUDE CODE ADAPTER

Direct compatibility with Claude Code CLI workflows, prompt contracts, and automated repository analysis tools.

RUNNER 03

CODEX ORCHESTRATOR

Coordinates task decomposition, approval gates, and multi-round code reviews across parallel agent threads.

The real key never enters the container.

API tokens and provider credentials live exclusively in Cloudflare Worker secrets. The egress proxy validates and signs outgoing calls while masking secrets in logs.

SECURITY ARCHITECTURE

Architected for containment, egress isolation, and explicit human sign-off.

Read Security Docs→

GVISOR SANDBOX

Kernel-level syscall interception in Cloudflare Sandbox ensures untrusted code cannot compromise host runtimes.

Kernel-Level Isolation ✓

DATA PROTECTION

Isolated environments. Encrypted at every layer. Your code never leaves your Cloudflare perimeter.

Zero Code Retention ✓

APPROVAL GATES

Cryptographically verified approval cards in Slack and the dashboard halt execution before shell commands run.

Human Verification Gate ✓

BYO KEY, BYO CLOUD

Bring your own API keys or host entirely on your own Cloudflare account with zero third-party data transit.

Self-Hosted Freedom ✓

100% OPEN SOURCE & ACCOUNT-OWNED

NO SUBSCRIPTION FEES. NO SEAT TAX.

Shiba is free open-source software under the MIT License. Deploy directly into your own Cloudflare account with zero vendor markups.

MIT License

Full Source Transparency

Fork, inspect, and customize without limits

$0forever

✓100% Open Source: Permissive MIT license with zero commercial restrictions
✓Unlimited Team Seats: Add your whole engineering team without paying $20–$50/user fees
✓Model Agnostic: Connect Claude 3.7, Gemini 2.5, OpenAI, or local weights with your own keys
✓Extensible Workflows: Customize approval policies, webhook handlers, and container images

Deploy with Wrangler →

Direct Infrastructure Control

Zero SaaS margin · Pay Cloudflare directly at cost

~$5/mo baseline for Workers Paid

✓Account Owned: Runs inside your own Cloudflare perimeter; code never leaves your account
✓Per-Second Compute: Isolated Sandbox containers bill only for exact active execution time
✓Zero Provider Markups: Tokens bill directly through your own AI Gateway stored keys
✓Granular Spend Limits: Enforce strict spend caps and rate limits in Cloudflare dashboard

Read Cloud Cost Breakdown →

Explore the guides

View all

AnnouncementProduct4 Sept 26

Deploy Shiba to your Cloudflare account

Configure your GitHub credentials, set up Cloudflare AI Gateway bindings, and deploy the orchestrator worker alongside isolated sandbox micro-containers in minutes.

ArchitectureSecurity18 Sept 26

Zero-Trust Ephemeral Sandboxes for Autonomous Coding

How Cloudflare Sandbox micro-containers isolate agent executions with egress proxy credentials, masking secrets while generating verified GitHub PRs.

"WELCOME. WE'VE BEEN EXPECTING YOU."

Add Shiba to your team

The teammate you actually want to work with.

Get started View on GitHub↗

IT'S REAL! ✦