Bring the agents you already use.
Cryonic runs Claude Code and Codex today, on your own subscription or an API key. More providers are planned. Each one is labelled with how much Cryonic can actually enforce.
Approval levels.
Per-action approval
Cryonic enforces Allow, Ask or Block on each action, outside the model.
Sandbox only
The provider’s sandbox limits what runs. Cryonic cannot approve or refuse single actions.
Unrestricted (your choice per agent)
Not in the app yet. When it ships, you could run an agent without either. Cryonic would log what it can observe and stop nothing.
Today an agent runs with per-action approval or a sandbox. When Unrestricted ships, Cryonic could not refuse an agent set to it: it would log what it can observe and stop nothing. It would be your choice per agent, and only where you accept that.
Providers and what they get.
| Provider | Status | Signs in with | Approval | Sandbox |
|---|---|---|---|---|
| Claude Code | Today | Your subscription (your own login, unmodified tool) or an API key | Per-action approval: Allow, Ask or Block, checked by a gate before every tool call. If the gate fails, the call is refused. | None under Cryonic on Windows. |
| Codex, app server (default) | Today | Your ChatGPT sign-in or an API key | Per-action approval: commands and file changes wait for Cryonic’s reply. Anything unrecognised is refused. | The one you pick. The read-only sandbox holds even if an approval is given. |
| Codex, exec | Today | Same as above | Sandbox only: no per-action approval. Cryonic refuses to start it if the agent has any Ask or Block rule. | The one you pick. Full access is refused. |
| Planned providers | Planned | OpenRouter, xAI API, Copilot CLI, OpenCode, Hermes Agent, Junie, Ollama, custom OpenAI-compatible keys, ACP agents | Cryonic will state the level for each provider before it ships. | To be confirmed |
| Antigravity | Not supported | – | Not supported for now. | – |
Each provider’s terms apply.
Subscription mode is for your own use, on your own PC, with the unmodified provider tool and your own login.
Cryonic never reads or stores provider login files. It cannot confirm that every provider allows unattended use on a subscription, so use an API key where that matters.
Join the waitlist.
Leave an email and you will hear when Cryonic is ready.