Workspaces for agents
Isolation, persistence, and governance — one command, no config.
Why Superserve
Agents execute code, make HTTP requests, and manage credentials. In production, every session needs its own isolated environment with persistent state and governance. Building that yourself means stitching together containers, proxies, secret managers, and logging. Superserve gives every agent a governed workspace out of the box.Key Features
Isolated by Default
Every session runs in its own Firecracker microVM. Nothing leaks between sessions or touches your infrastructure.
Nothing Disappears
The
/workspace filesystem persists across turns, restarts, and days. Resume where you left off.Credentials Stay Hidden
A credential proxy injects API keys at the network level. The agent never sees them — they never appear in LLM context, logs, or tool outputs.
Any Framework
Claude Agent SDK, OpenAI Agents SDK, LangChain, Mastra, Pydantic AI, or plain stdin/stdout.
One Command
superserve deploy agent.py. No Dockerfile, no server code, no config files.Real-time Streaming
Stream tokens and tool calls as they happen with Server-Sent Events.
Sub-second Cold Starts
Pre-provisioned containers mean your agent starts almost instantly.
Encrypted Secrets
Set environment variables with
superserve secrets set — they’re encrypted at rest and injected securely.Quick Example
Install the CLI:How It Works
Deploy your agent
Run
superserve deploy agent.py to package and upload your agent code. Superserve analyzes dependencies and builds a container image.Start a session
When you run
superserve run my-agent, Superserve spins up a new Firecracker microVM with a persistent /workspace filesystem.Send messages
Your messages are sent to the agent running in the isolated environment. The agent can execute code, make HTTP requests, and use tools.
Stream responses
Agent responses stream back in real-time via Server-Sent Events. You see tokens and tool calls as they happen.
Use Cases
Production-Ready Agent Deployment
Production-Ready Agent Deployment
Deploy agents to production without managing infrastructure. Superserve handles isolation, scaling, and monitoring.
Multi-Tenant Agent Applications
Multi-Tenant Agent Applications
Each user gets their own isolated session with persistent state. Perfect for SaaS products with agent-powered features.
Secure Code Execution
Secure Code Execution
Run untrusted code safely in Firecracker microVMs. The agent can’t access your infrastructure or other sessions.
Long-Running Agent Workflows
Long-Running Agent Workflows
Agents can work on tasks across multiple turns and days. The persistent workspace means nothing gets lost.
Framework-Agnostic Integration
Framework-Agnostic Integration
Use any agent framework or write your own. Superserve works with Claude Agent SDK, OpenAI Agents SDK, LangChain, Mastra, Pydantic AI, and custom implementations.
Next Steps
Quickstart
Get up and running in 5 minutes
Core Concepts
Learn about isolation, persistence, and credentials
CLI Reference
Explore all CLI commands
TypeScript SDK
Integrate agents into your application