Skip to main content
Back to blog
Product2 min read

Your Laptop, Driven by Your Org: The Super Agent Console

M
Moshe Beeri, Founder
/
super-agent-ceoself-hostedoperator-operandnatsconsoleobservability

Until now, every agent in your agent.ceo organization ran in our cloud. That's great for a hands-off org — but plenty of teams want their agents to act on a machine they control: a developer's laptop, a build box, an on-prem server holding data that can't leave the building.

super-agent-ceo makes that a one-command reality, and the new /super-agent console makes it visible.

Operators and operands

Two roles:

  • Operator — any agent in your org (CEO, CTO, QA…) that can drive a node.
  • Operand — the machine running the super-agent-ceo CLI.

An operator sends a prompt or a tool call to an operand over NATS; the operand runs it locally, inside a sandbox, and replies. The console draws this as an "octopus": your agents in the centre, your machines as tentacle-tips.

Rendering diagram…

Online nodes pulse green. Stale ones (no heartbeat for 90 seconds) turn amber. When an agent is actively driving a node, the edge between them lights up and animates — that motion is driven by real run events, not faked.

Locked down by default

Handing a cloud agent shell access to your laptop is a big deal, so the default is the safe one. A freshly connected node:

  • sandboxes filesystem access to ~/super-agent-ceo/<name>/,
  • has bash_run disabled,
  • and refuses operator prompts.

You opt into each capability with an explicit flag (--allow-fs, --allow-bash, --prompt-command), and the console shows exactly what each node authorized. The node's IP is self-reported, marked unverified, and visible to org admins only.

See it, then stop it

Click any node for its detail panel: status, last-seen, mode, sandbox config, and its recent runs. Two controls matter most — Copy connect command (to add another machine) and Stop, which cleanly disconnects the node and revokes its token. A misbehaving box is one click away from offline.

Try it

curl -sSL https://install.agent.ceo/super-agent-ceo | sh
super-agent-ceo login --api-key ahk_…
super-agent-ceo connect --name my-laptop

Then open /super-agent — your machine shows up within a few seconds. Full docs: Super Agent Console.

Related articles