Self-hosted environments and coding agents
The keys never
leave the building.
Workspaces are defined in Terraform and run on your infrastructure. The agent loop executes in the control plane, so model credentials stay out of the workspace.
curl -L https://coder.com/install.sh | sh
coder server
As documentedControl plane
Where the loop runs
The agent loop executes here, on infrastructure you operate.
- model credentials
- user identity per action
- cost tracking
- audit logging
Workspace
Where the code is
EC2 instances, Kubernetes pods or Docker containers, described in Terraform.
- your repository
- your IDE
- no LLM credentials
The dashed chip is the claim worth checking: the project states there are no LLM credentials in workspaces.
Idle resources shut down automatically. AGPL-3.0, with paid tiers for large teams.