Core Features
Agent Harbor provides several key capabilities that differentiate it from running AI coding agents directly.
Sandboxed Execution
Agents run in isolated environments where they cannot:
- Access sensitive files (SSH keys, credentials)
- Modify your host filesystem directly
- Conflict with other running agents
- Access the network without explicit permission
Every change is captured in a copy-on-write overlay and can be reviewed before applying.
Time Travel & Forking
Rewind to any point in an agent’s session and branch off:
- Filesystem snapshots at logical boundaries
- Visual replay of terminal output
- Create new branches with modified instructions
- Compare different execution paths
Works with native CoW filesystems (ZFS, Btrfs) or the cross-platform AgentHarborFS.
Learn more about Time Travel →
Recording & Replay
Every session is captured for later analysis:
- Full PTY stream with exact timing
- Snapshot markers for navigation
- Brotli compression for efficient storage
- Extract branch points for intervention
Secret Shielding
Keep your local secrets out of LLM provider traffic without breaking the agent:
- Real secrets (
.env, cloud creds, private keys) are swapped for placeholders before reaching the model - The model only ever sees neutral placeholders — never your keys
- Placeholders are restored to real values on the response, so the agent keeps working
- Declared known values plus an optional detector for undeclared secret-shaped strings
Learn more about Secret Shielding →
Parallel Agent Execution
Launch multiple agents on the same task:
- Each agent gets its own filesystem branch
- No conflicts between concurrent sessions
- Compare results and cherry-pick the best solution
- Scale horizontally for complex tasks
Filesystem Snapshot Providers
| Provider | Platform | Best For |
|---|---|---|
| ZFS | Linux | Production servers with ZFS pools |
| Btrfs | Linux | Development machines with Btrfs |
| AgentHarborFS | All | Cross-platform consistency |
| Git | All | Universal fallback |
Terminal Integration
Works with your existing terminal setup:
Multiplexers: tmux (stable), zellij (beta), GNU Screen (beta)
Terminal emulators: kitty, iTerm2, WezTerm, Tilix, Ghostty, Windows Terminal
Editor terminals: Vim, Neovim, Emacs
No special terminal required — Agent Harbor auto-detects your environment and integrates with what you already use.
Direct Agent Launchers & Minimal-Impact Mode
Prepend ah to any supported agent (ah claude, ah codex, ah grok, ah copilot, ah amp, ah cursor, ah opencode, ah qwen, ah agy) to keep its native TUI while gaining local OS sandboxing, anti-halting supervision, in-place working copy execution, and live .ahr session streaming.
Learn more about Direct Agent Launchers →
C-Suite Manager Agent & Extensions
Coordinate multi-department workflows across development, marketing, finance, and legal using specialized roles (--role), composable extension bundles (--with), persistent oracle agents (@coordinator, @spec-index), and declarative Workspace Templates (ah workspace init --template).
Learn more about the C-Suite Manager Agent →
Multi-Host Fleet, Cloud Executors & Self-Hosting
Connect personal workstations (ah login), shared servers (ah enroll), and auto-scaled cloud VMs over mutually authenticated mTLS QUIC, or self-host the Agent Harbor control-plane hub (ah server start).