Run Claude Code and Codex in the cloud without thinking about infrastructure. Govern with scoped permissions, budget caps, and full observability.
Start, steer, and review sessions from the terminal, the web app, the API, Slack, or GitHub. Same agents, same logs, same budgets everywhere.
$
One file declares the agent and the environment it runs in: repositories, dependencies, permissions, and budgets. Check it in, review it, and audit changes like any other code.
Every session runs on credentials minted just for it: the repositories it may touch, the tools it may call, nothing else. Revoked with the sandbox.
budget: session: 1.50 day: 5.00 week: 20.00 month: 60.00Cap spend per session, per developer, or over time — in the same YAML. A session that hits its cap stops, and the ledger shows where every token went.
Every thinking token, tool call, and diff is recorded and attributed. Logs are searchable by the whole team (if you want).
Install the GitHub App on the repositories agents may touch. Ellipsis clones them, pushes branches, and opens pull requests with exactly the access you granted.
ellipsis:
kind: environment
name: api-toolchain
repositories:
- name: acme/api
variables:
- name: NPM_TOKEN
image:
setup: |
cd api && pnpm install
compute:
cpu: 4
memory: 16GBOne YAML file describes the machine a session runs on: the repositories cloned in, the secrets, the image, the compute. Commit it, and every agent and session references it by name.
from ellipsis import Ellipsis
client = Ellipsis(api_key="ellipsis_key_...")
handle = client.sessions.run(
prompt="Fix the flaky test in ci/",
environment="api-toolchain",
)
print(handle.id)Starting a session returns immediately. The agent works on its own isolated cloud machine, in the environment you named, hundreds at a time.
Ellipsis is built with governance at scale in mind. Permissions are defined before a session starts. Every agent action is logged. You have full control over your data longevity.
More about securityMinted per session, scoped to the repos you allowed, revoked with the sandbox.
Your code lives only in the session sandbox and is deleted with it.
Every command, file change, and tool call an agent made, kept after the sandbox is gone.