These terms are the agreement between you and Astral AI Inc. for the Agentbox application for macOS and the Agentbox website. Installing or using Agentbox means you accept them. If you do not accept them, do not install or use Agentbox.
Last changed 5 October 2026. This version replaces every earlier version.
Agentbox is made by Astral AI Inc. Where the words we, us and our appear here they mean Astral AI Inc. Where the words you and your appear they mean the person or the company using Agentbox. Where the word Agentbox appears it means the application, the Agentbox website and anything we supply as part of them.
These terms and the privacy policy are the whole agreement between us about Agentbox. If you are using Agentbox for a company, you are stating that you are allowed to accept these terms for it, and this agreement then binds that company as well as you.
You must be at least 18 years old, or the age of legal majority where you live if that is higher, and able to enter a binding contract. You must not be barred from using our software under any law that applies to you, and you must not use Agentbox where the law where you are forbids it.
Agentbox is a Mac application that works with the copy of Claude Code already installed on your computer. It shows you the agents you are running, lets you answer them, and runs everything on your own machine under your own user account. It stores nothing of yours on our systems and it holds no account for you.
Agentbox needs Claude Code installed and your own account with Anthropic. We do not supply either, we do not pay for either, and we cannot obtain access to Claude for you. If Anthropic changes, restricts or ends what you can do, Agentbox may stop working in whole or in part, and that is outside our control.
If you use Codex through Agentbox, you also need your own Codex installation and provider access, governed by your agreement with that provider. Requesting compaction instructs Codex to summarize the existing conversation and can use your provider allowance. A summary may omit details. Compaction does not authorize file changes, shell commands or broader access to your computer, and Agentbox does not receive the conversation or the summary.
Command availability depends on the installed provider version and your account. Native reviews and invoked skills may use your provider allowance and act under the session permissions you have configured. Local task model and effort choices apply to subsequent responses. Agentbox reports unavailable commands. Displaying a command does not guarantee that your provider or account enables it. Review findings and summaries require your judgment before you rely on them.
What you send Anthropic is governed by your own agreement with Anthropic and not by this one, because Agentbox does not stand between you and them.
We are not affiliated with Anthropic and Anthropic does not endorse or sponsor Agentbox. Claude and Claude Code are Anthropic's names and not ours, and nothing here gives you any right in them.
We grant you a personal, non exclusive, non transferable and revocable licence to install and use Agentbox for as long as this agreement lasts. Agentbox itself, including its code, its design and its name, stays ours, and this licence gives you no ownership in any of it.
You may not do any of the following.
Everything you write and everything your agents write for you belongs to you or to whoever it already belonged to. We claim no ownership in any of it and we take no licence in it. We could not read it if we wanted to, and what does and does not reach us is set out in full in the privacy policy, which forms part of this agreement.
You are responsible for what you put into Agentbox and for having the right to put it there.
Agentbox drives Claude Code. Claude Code edits real files and runs real commands on your computer with the permissions you have given it. When you approve something in Agentbox it happens for real, and it can create, change and delete files, run programs, use the network and act on anything your user account can reach.
Agentbox managed Codex workers do not automatically inherit Codex apps or plugins. The local task store connection may remain available to project workers. This restriction is scoped to those workers and does not change your native Codex configuration.
A message sent during active work may be applied at the provider's next processing step. A correction does not undo actions already taken and does not change the running session's permissions. If delivery cannot be confirmed, Agentbox reports that uncertainty. Check the conversation before sending the same instruction again.
Commands you enter in the built-in terminal execute directly under your computer account. They are not agent requests and do not pass through provider approval cards or provider sandbox rules. They can change or delete files, run programs and use the network. Hiding the terminal or changing tasks leaves its shell running. Ending the session or quitting Agentbox ends its managed processes. Commands are not automatically restarted when Agentbox opens again.
Personal Claude Code conversations use the same approval cards as project tasks when the provider requests permission. Connecting this approval channel does not automatically grant permission, enable additional integrations or apply the broader permissions of a project worker. Existing provider permissions and denials still apply.
You decide what to approve and you are responsible for what follows, including what an agent does that you did not intend. Agents are not deterministic and they make mistakes. Keep your work in version control, keep backups you can restore from, and do not grant an agent access to anything you cannot afford to lose.
Remote Control is optional and must be enabled for a conversation. It connects your existing Claude Code session to your Anthropic account for access from another device. Remote messages can cause the local agent to use the tools and permissions available to that session. Keep Agentbox and the computer running while using it. Provider eligibility, sign in, connectivity and session availability can prevent or interrupt access. Turning it off disconnects the bridge without cancelling unrelated tasks. Provider retention is governed by your agreement with that provider.
We do not review, supervise or control what an agent does. Agentbox shows you what is happening and asks you before an action that needs approval, and it does not warrant that any particular action will be caught, shown or stopped.
Where you have connected a service to Claude Code, such as Slack or Linear, an agent may read from it without asking you each time, signed in as you and under your own agreement with that service. In this version an agent cannot send or post anything through a connected service. If that changes, this section will say what an agent may send without your approval before any version that can send is released.
You may not use Agentbox to do any of the following.
If you do any of this we may end this agreement under section 15 and stop you using Agentbox.
Agentbox costs nothing today. If part of it ever costs money we will say so plainly, and you will choose it before anything is charged. Nothing in this agreement signs you up to pay for anything.
What you pay Anthropic for your own use of Claude is a matter between you and Anthropic. We do not receive it and we do not control it.
If you choose to send us an idea, a suggestion or a report about Agentbox, we may use it in any way and without owing you payment, credit or confidentiality. This applies to a file you attach as it applies to what you write. Do not send us anything you consider confidential or anything you are not free to give away.
Sending is something you do and not something Agentbox does for you. A message that cannot be sent is not held or tried again, and the privacy policy says what the box sends and who carries it.
Agentbox is early software and it will change. Parts of it may be altered or removed, and we may stop offering it altogether. We may also update these terms, and the date at the top says when they last changed. Where a change materially reduces your rights, we will say so in the application rather than quietly editing this page. Using Agentbox after a change means you accept the changed terms.
AGENTBOX IS PROVIDED AS IS AND AS AVAILABLE. To the fullest extent the law allows, we make no warranty of any kind about it, whether express, implied or statutory, and we specifically disclaim the implied warranties of merchantability, fitness for a particular purpose, title and non infringement, and any warranty arising from a course of dealing or a usage of trade.
We do not warrant that Agentbox will work, that it will keep working, that it will be free of faults, that faults will be fixed, that it is fit for what you want it for, or that anything an agent produces through it will be correct, complete or safe to use. Some places do not allow a warranty to be excluded, and where that is so this section applies only as far as it lawfully can.
To the fullest extent the law allows, we are not liable for any indirect, incidental, special, consequential, exemplary or punitive loss, and we are not liable for lost profits, lost revenue, lost business, lost time, lost goodwill, or for the loss, corruption or destruction of data, files or work, however that loss arises and even if we were told it was possible.
To the fullest extent the law allows, our total liability arising out of or connected with Agentbox, taken together across all claims, is limited to the greater of the amount you paid us for Agentbox in the twelve months before the claim arose and one hundred United States dollars. Agentbox costs nothing today, so that amount is at present one hundred United States dollars.
Nothing here excludes liability that cannot lawfully be excluded, including liability for death or personal injury caused by negligence and for fraud. Some places do not allow these limits, and where that is so this section applies only as far as it lawfully can. These limits apply even if a remedy in this agreement is found to have failed of its essential purpose.
You will defend, indemnify and hold us harmless against any claim, loss, liability, cost and reasonable legal fee arising out of your use of Agentbox, out of anything you or your agents did through it, or out of your breach of this agreement or of any law. We will tell you about a claim we want covered and you may take over its defence, provided that you do not settle it in a way that admits anything on our behalf without our agreement.
You may end it at any time by deleting Agentbox from your computer. We may end it, or suspend your use of Agentbox, if you breach it, if the law requires it, or if we stop offering Agentbox. When it ends your licence under section 5 ends with it and you must stop using Agentbox.
Nothing of yours is held anywhere for you to recover, because nothing you wrote was ever sent to us. Sections 4, 6, 10, 12, 13, 14, 16, 17 and 18 continue after this agreement ends.
This agreement is governed by the laws of the State of Delaware in the United States, without regard to its rules on conflict of laws. The state and federal courts sitting in that state have exclusive jurisdiction over any dispute arising out of it, and you and we each agree to that jurisdiction and give up any objection to it.
If the law where you live gives you the right to bring a claim in your own country's courts, or gives you protections as a consumer that cannot be signed away, this section does not take those away from you.
A legal notice to us under this agreement is given in writing to [contact email to be added before launch] and takes effect when we receive it. A notice to you is given in the application or on this website.
If a part of this agreement is found not to hold, the rest of it still holds and the failed part is read as narrowly as it needs to be to work. If we do not enforce something straight away, we have not given up the right to enforce it later. You may not transfer this agreement to anyone else without our written agreement, and we may transfer it to a company that buys or merges with our business. Nobody other than you and us has any right under this agreement. Neither of us is liable for a failure caused by something genuinely outside our control. The headings and the numbers here are for reading only and do not change what the sections mean.