Stop babysitting SSH. Connect Claude, Codex, and any MCP agent to sandboxed servers — every command visible in Terminal Use, every browsing session watchable live in Browser Use, every file move on consent, every private key locked in Keychain. Free to download, PRO $19.99 lifetime.
Watch Claude Code deploy an app through MCP, drive a live remote TUI, and solve a CAPTCHA through Browser Use — no mockups, just real sessions on real servers.
Browser Use lets AI agents operate a real browser on your server while you observe each step live. This demonstration uses Google’s reCAPTCHA demo environment to illustrate browser interaction and CAPTCHA-handling workflows.
Terminal Use keeps every AI keystroke observable while the agent runs a real remote TUI on your Apple device.
Through Gumpbox's MCP server, Claude Code deploys, configures, and manages infrastructure — no copy-paste, no context switching.
Gumpbox runs commands inside the systemd-run sandbox already on every major Linux distro — no extra agents, no third-party daemons, nothing to install.
That makes AI-assisted ops safe, repeatable, and predictable: the right access for each task, with hard lines between read-only inspection, controlled updates, and trusted execution.
No network. Read-only disk. The safe default for inspection, diagnostics, and read-only automation.
Local writes, no network. For file updates, patches, and controlled maintenance.
Full power, no limits. Reserved for the workflows you explicitly trust.
Your credentials live in Apple Keychain, gated by biometrics and Apple’s security model — never exposed to AI tools, never pasted into a prompt.
Your Apple account keeps the credential vault private and fully under your control.
Agents request actions through Gumpbox — they never see a private key.
Touch ID or Face ID locks down every access on supported Apple devices.
Spin up isolated containers straight from the UI or through MCP. The agent owns the full lifecycle — create, start, stop, restart, destroy — and gets a raw headless terminal into each one. gVisor intercepts syscalls and Docker enforces isolation, so in-sandbox work is auto-trusted. Only ops that touch local data (keys, shares, the sandbox itself) ask for consent.
Create, start, stop, restart, update, and destroy sandboxes on any server with Docker + runsc. Workspace files persist across restarts; rootfs is ephemeral.
Raw PTY into the container — send input, read output, resize, interrupt, suspend, EOF. No in-app window, no per-command approval. The agent drives TUIs directly.
Provision keypairs that stay in Keychain, issue opaque share tokens, and hand off an authorize URL. Teammates connect over SSH with their own fresh key — no secrets travel through the agent.
Read ops return immediately. In-sandbox mutations (start/stop, terminal I/O) auto-approve. Destructive ops (create, destroy, key/share lifecycle) trigger an in-app consent sheet.
Default alpine:latest, or pull from a private registry. Custom CPU, memory, disk, env, ports, and CMD — repeatable environments for any workflow.
Every action lands in the activity trail with sandbox + parent server attribution. Embedded terminal snapshots stay nested inside their parent action.
A Chromium container on your server, driven by the agent through MCP — navigate, click, type, juggle tabs — streamed live to your Mac over noVNC. No driving without a watcher: close the viewer and the agent's hands come off the wheel.
The agent drives a real Chromium through MCP: navigate, click, type, scroll, read the page, open and close tabs, take screenshots. Same verbs as everything else in Gumpbox.
Every keystroke and navigation streams to your Mac over noVNC the moment it happens — plus a shareable viewer URL with a live latency readout for watching from any browser.
The agent only holds control while a viewer is open. Close the window or let the tab die, and driving is revoked within seconds. The browser keeps running; the hands come off.
Import cookies and bookmarks from Chrome, Edge, Brave, or Arc on your Mac and apply them to a session. The agent starts already signed in — through your Keychain, never through the prompt.
The browser lives in a Docker container on a host you already manage. Nothing runs on your Mac, no traffic routes through us, and destroy removes the whole thing.
She floats in her own always-on-top window — fully transparent, drag her anywhere, she stays even when the main window closes. When your agent needs you, she hops.
Pending approval? She zips and rings. Tool calls running? She glows. Success earns a happy hop-spin, and quiet fleets lull her to sleep.
Tap her once to jump straight to the active terminal or the running browser session — with a chooser when both are live.
A minimal control strip performs waves, smiles, and dance breaks, while 500+ idle one-liners keep her company between deploys.
Tour the surfaces ops teams reach for every day — AI control, terminals, monitoring, tunnels, files, and SSH — all in one native app.
Gumpbox brings AI-compatible server management into one native Apple app — with real visibility and hands-on controls for everyday Linux work.
Claude, ChatGPT, and every MCP-compatible tool plugs into your configured server fleet through Gumpbox.
Terminal Use runs headless commands and interactive TUIs — opencode, vim, htop, codex, gemini cli, claude code — in plain sight.
One polished Mac, iPhone, and iPad experience for server access, file moves, monitoring, and day-to-day infrastructure work.
Free to download, a one-time PRO unlock, and support through Discord.
Free to start. A one-time PRO unlock for unlimited servers, iCloud sync, and backup/restore. Boilerplate source available for developers. No subscriptions, ever.
Free to download, no credit card.
Mac, iPhone, and iPad
Lifetime access. No subscriptions.
Unlock inside the app
One-time purchase, full Xcode project
Available on Gumroad
Connect Claude, ChatGPT, or any MCP tool, run your Linux infrastructure, and keep every terminal and server action in full view. Free to start, PRO $19.99 lifetime.
