Execution Associates Put us on it

ProjectsisbDocs

Guides

Each guide walks through one job from start to finish, with commands that run, and keeps the detail you need when something does not go to plan. If a word is unfamiliar, Concepts explains the model; every flag and field is in the Reference.

Run apps#

  • Deploy apps from an image or git: projects, environments, the .env editor, deployments with logs and rollbacks, and push webhooks from GitHub, GitLab and Gitea.
  • Builds and the local registry: turn a source directory into an image in a fresh sandbox, with railpack, nixpacks or a Dockerfile.
  • Preview deployments: a preview per pull request, on its own URL, removed when the request closes.
  • Templates: one-click apps from the built-in catalog, Dokploy's or Coolify's, with passwords generated and kept as secrets.
  • Coming from Dokploy: how Dokploy's concepts map onto isb, and what differs.
  • Coming from Coolify: the same for Coolify, including its one-click service templates.
  • Domains and ingress: public hostnames with HTTPS, on the server's own ports or through an org's Cloudflare Tunnel.

Keep data safe#

  • Databases, backups and restores: Postgres, MySQL, MariaDB, MongoDB and Redis with generated credentials, scheduled backups to S3, and restores.
  • Volumes: snapshots now and on a schedule, volume backups, and restores staged beside the live volume.
  • Secrets: an org's encrypted store, 1Password, break-glass recipients, and delivering secrets as files or variables.
  • Scheduled jobs: commands on a cron schedule against an app.
  • Notifications: deploys, health, certificates, backups and jobs to a webhook, Slack, Discord, Telegram or email.
  • Uptime monitoring: every app's public URL checked from outside, with incidents, uptime history, certificate warnings and a heartbeat for when the host dies.

People, agents and access#

  • Sign-in and accounts: the first admin, invitations, passwords, passkeys, and GitHub, Google or OIDC sign-in.
  • Reach isb serve remotely: Cloudflare Tunnel and Access in front of the daemon, or a tailnet.
  • Agents and MCP: connect an agent with a token that reaches one org; agents in a workspace and the sandboxes they make.
  • isb for kubectl users: list and describe instances, exec, logs, copy files, scale, restart, events and top, as CLI commands and MCP tools.
  • SSH and herdr: plain ssh, scp and herdr into any instance of an org, with the keys on your isb account.
  • Workspace images and recipes: build the images workspaces start from, isb's default one (Claude Code, Codex, herdr, mise), and first-boot scripts.
  • Servers and dedicated VMs: run orgs on other hosts, or in a VM of their own, from one control plane.

Develop with sandboxes#