You built the agent. Now how do you let the rest of the company use it — without exposing secrets, blowing budgets, or losing control? Agyn is an open-source, Kubernetes-native agent orchestration platform. Run any AI agent (Claude Code, Codex, custom) at scale with serverless execution, Terraform-managed configuration, and zero-trust networking where credentials never reach the LLM context.
Why Agyn
| Problem | Agyn |
|---|---|
| Agents run on individual laptops | Centralized deployment on your infrastructure |
| Secrets passed directly to models | Secrets isolated, never exposed to the model |
| No budget visibility or limits | Spend caps at any level — per agent, per team, per org |
| No access control | RBAC, SSO, audit logs |
| Locked to one vendor | Agent-agnostic, model-agnostic |
| Can't scale | Horizontal scaling, auto-termination on idle |
How Agyn Compares
An open-source, self-hosted alternative to Google AX, AWS Bedrock AgentCore, and Claude Code Cloud for running AI agents in production with full control over security and configuration.
| Capability | Agyn | Google AX | AWS AgentCore | Claude Code Cloud | kagent | Copilot Studio |
|---|---|---|---|---|---|---|
| Self-hostable | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{green}✓}$ | ${\color{red}✗}$ |
| Run any agent container | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{red}✗}$ |
| Declarative config (IaC) | ${\color{green}✓}$ (Terraform) | ${\color{green}✓}$ (YAML) | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{green}✓}$ (CRDs) | ${\color{red}✗}$ |
| Serverless (scale-to-zero) | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{green}✓}$ |
| MCP servers isolation | ${\color{green}✓}$ | ${\color{red}✗}$ | -- | -- | ${\color{red}✗}$ | -- |
| Secrets never reach LLM | ${\color{green}✓}$ | ${\color{red}✗}$ | -- | -- | ${\color{red}✗}$ | -- |
| Zero-trust networking | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{red}✗}$ | ${\color{red}✗}$ |
| Per-conversation sandboxing | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{green}✓}$ | ${\color{red}✗}$ | ${\color{green}✓}$ |
Coming from...
- Google AX? — AX sandboxes conversations but not tools from the agent; Agyn isolates each MCP server in its own container and runs any agent without protocol adaptation. Comes with pre-built Claude Code and Codex agents out of the box.
- AWS AgentCore? — Agyn gives you the same serverless execution, self-hosted, with Terraform config and zero-trust access to internal services.
- Claude Code Cloud? — Agyn runs Claude Code as one of many agent containers on your own infrastructure with per-tool credential isolation.
- kagent? — Agyn adds serverless scale-to-zero, agent-agnostic containers, and security isolation beyond Kubernetes RBAC.
Getting Started
Deploy a cluster in 15 minutes
git clone --branch latest https://github.com/agynio/bootstrap.git
cd bootstrap
./apply.sh
Open the console. Create an org. Deploy your first agent.
Want a ready-made fleet to play with? Apply agynio/demo-agent — a Terraform config that provisions a support, marketing, and data-engineer agent in one command.
For production installs, see Self-host install.
Define agents as code
Stop clicking. Version your agent infrastructure.
resource "agyn_agent" "support" {
organization_id = agyn_organization.acme.id
name = "Support"
nickname = "support"
model = agyn_llm_model.gpt_4o.name
image = "ghcr.io/agynio/agent-runtime:v1.0.0"
init_image = "ghcr.io/agynio/agent-init-codex:v1.0.0"
idle_timeout = "5m"
availability = "internal"
}
resource "agyn_agent_mcp" "zendesk" {
agent_id = agyn_agent.support.id
name = "zendesk"
image = "ghcr.io/acme/zendesk-mcp:latest"
envs = [
{
name = "ZENDESK_TOKEN"
secret_id = agyn_secret.zendesk_token.id
},
]
}
terraform init && terraform apply
See the Terraform provider reference for every resource.
How Agyn runs agents
- Serverless runtime — agents spawn on message, scale to zero on idle. No always-on compute.
- Any agent container — Claude Code, Codex, or your own. No protocol adaptation required.
- MCP servers in separate containers — each tool gets its own filesystem and process tree. Credentials are injected only into the tool that needs them, never into the agent.
- Zero-trust networking — every agent gets its own x509 identity. Deny-by-default access to internal services.
- Declarative config — define agents and their harness in Terraform. Version-controlled, peer-reviewed, automated.
- Observability — token usage, compute, tracing, activity logs.
Full architecture: docs/operate/architecture.md.
Video walkthroughs
| Video | What it shows |
|---|---|
| Agyn in 3 minutes — From clean cluster to a working agent answering a chat message. End-to-end tour. | |
| Coming soon | Deploying agents with Terraform — Define an agent fleet as code, apply it, talk to them. |
| Coming soon | Inspecting a run with Tracing — Every LLM call, every tool execution, every context decision. |
Documentation
Full docs live in docs/:
- Introduction — what Agyn is, concepts, architecture at a glance.
- Self-host install — bootstrap, production install, upgrades.
- Administer — Console + Terraform for orgs, agents, models, secrets, runners, apps.
- Use — chat, files, tracing, usage, port exposure.
- Build & extend — Gateway API, MCP servers, agent CLIs, apps.
- Operate — networking, identity, scaling, backups, security.
- Reference — glossary, service catalog, schema pointers.
- Troubleshooting — diagnostic playbook by symptom + FAQ.
Repository map
Agyn is split across focused repositories. The most useful starting points:
| Repo | What it is |
|---|---|
agynio/platform |
This repo. Documentation hub. |
agynio/architecture |
Source-of-truth architecture and product specs. |
agynio/bootstrap |
One-command local install (k3d + Terraform). |
agynio/platform-charts |
Production Helm charts. |
agynio/api |
Protobuf schemas for every service. |
agynio/terraform-provider-agyn |
Terraform provider. |
agynio/agyn-cli |
Platform CLI. |
agynio/console-app · chat-app · tracing-app |
Browser UIs. |
agynio/agent-init-codex · agent-init-claude · agent-init-agn |
Agent CLI init images. |
Full list with descriptions: docs/reference/service-catalog.md.
Community
Research
- Agyn: An Open-Source Platform for AI Agents with Scalable On-Demand Execution, Agent Definition as a Code, and Zero-Trust Access (arXiv:2605.27575)
Contributing
Good places to start:
- Read the architecture docs to understand the system before touching code.
- Join the Discord for questions while you work.
License
AGPL-3.0