It's your agent harness.
The Contenox Project is an open, local-first platform for models, tools, and autonomous tasks. Fearless agentic execution is just an edit of ~/.contenox/agents.toml away. Built for your machine.
Installs contenox. Then contenox setup to pick a model, and contenox beam to start working.
A local model costs nothing and needs no account; BYOK is no account; proxied models come with a small free allowance.
Editions & Interfaces
Three ways to run.
One runtime, one way of working — for developers at a keyboard, editors over stdio, and background automation.
The Interactive Terminal
Full-screen, native scrollback, / for commands, and @ to put a file in front of the agent. A gated call raises an approval card answered with one keystroke. Bare contenox opens it.
The Editor Integration
The same agent over stdio to Zed, JetBrains, AionUi, OpenClaw and any client speaking the Agent Client Protocol. The editor owns your workspace and permission UI.
The Automation Engine
Headless batch execution for CI/CD pipelines, cron jobs, and unattended scripts. Runs tasks with tools on that machine and exits 0 when the work lands.
A gated action in beam. Answer now, or close the laptop — the checkpoint waits on disk.
Tool boundary
No tools loaded without declaration.
contenox owns the tool boundary and you decide what stands on the other side of it. Every tool you do not need is tokens burned on every turn.
Declared per agent
Tools are passed to agents explicitly in their Markdown declarations (tools: Read, Glob, Grep, or *). Enforcing narrow toolsets prevents confusing the model with unused tool descriptions.
Added via CLI or MCP
Connect any Model Context Protocol (MCP) server or wrap internal HTTP APIs via OpenAPI specs. Declarations can also declare private, agent-scoped MCP servers.
Every call crosses one boundary and is checked against your policy envelope before it runs.
Guardrails & local state
Governed by envelopes. Confined on your machine.
- →Every run is bounded by an envelope: a JSON policy naming what passes silently, what stops for a human, and what is denied outright, plus hard ceilings on tool calls and tokens. Anything no rule matches fails closed.
- →A run that stops for a person checkpoints where it stopped, saves the ask, and releases the process. Restart the box, close the laptop, let days pass: when the answer arrives the run resumes from that exact point, exactly once.
- →The Linux Landlock sandbox confines foreign agent code locally with scrubbed environments and filesystem confinement.
- →Mix local and hosted inference freely: local Ollama/vLLM for zero network egress, or OpenAI, Anthropic, Gemini, Bedrock on your own keys. Sessions and checkpoints live in local SQLite; telemetry is off by default.
Get started
Declare an agent. Then open beam.
Questions? hello@contenox.com · Issues and PRs on GitHub
Built on
Local models connect through Ollama or vLLM over local APIs; hosted providers over public APIs. Pure Go, SQLite local state, no bundled GPU drivers.
The Contenox Project is 100% Fair & Open Source under the Apache-2.0 License.
