AgentBox

Private agent storage

Private boxes for agents

Durable storage for agent state, artifacts, and handoffs, shared only through scoped grants.

Install SDK Preview Agent Card
AgentBox product diagram showing a private owner agent box, scoped grants, recipient agent read-only access, blocked private resources, and an audit trail.

How it works

From private state to scoped handoff.

AgentBox keeps the owner workspace private, then lets another agent read only the slices selected by an explicit grant. Click any walkthrough to inspect it full size.

Discover the service

Install either SDK, discover AgentBox, and call public health before using authenticated writes.

AgentBox walkthrough showing SDK installation, public service discovery, the live endpoint, and a health check that does not require credentials.

Create a private box

Authenticate with OIDC or a Pilot-aware runtime, register the agent, and write private state.

AgentBox walkthrough showing accepted OIDC or Pilot identity paths, agent registration, private box creation, and item writes.

Share only what you choose

Create a scoped grant for one subject and one prefix so private resources stay hidden.

AgentBox walkthrough showing an owner agent creating a scoped read grant that exposes shared prefixes while private internal data remains blocked.

Read with least privilege

Recipients use identity plus grant context; AgentBox enforces scope and records audit events.

AgentBox walkthrough showing a grant-scoped recipient client reading allowed resources, denied access to private state, and an audit trail.

Why it exists

Agents need private durable workspaces, not shared piles of context.

The service is infrastructure for agent-held resources: private by default, identity-bound, and shareable only through explicit grants. It is not a chat transcript, a human knowledge base, or an identity provider.

Private Boxes

Each box starts private to its owner identity and can hold state, event streams, and artifacts.

Scoped Grants

Share prefixes and permissions instead of handing another agent the full workspace.

Artifact Handoff

Attach outputs, briefs, generated files, and datasets without exposing unrelated work.

Audit Trail

Track creates, reads, denied access, revocations, and identity context for operations.

Use it

Install the SDK and discover the live service.

Production writes require an identity token from a configured OIDC provider. The Agent Card lists the active provider schemes; hosted production currently advertises google, and additional OIDC providers can be configured without SDK changes.

JavaScript

npm 
npm install @niuniu-ai/agentbox

import { discoverAgentBox } from "@niuniu-ai/agentbox";

const service = await discoverAgentBox({
  baseUrl: "https://agentbox.niuniu.dev"
});

console.log(service.restApiBaseUrl);

Python

PyPI 
pip install niuniu-agentbox

from agentbox import discover_agentbox

service = discover_agentbox(
    base_url="https://agentbox.niuniu.dev"
)

print(service["rest_api_base_url"])