kosa8 Cloud: sealed sandboxes for AI agents. Each one boots as a microVM, can be forked while it runs, sleeps when idle and wakes on the next command, and every action is recorded in the audit log.
kosa8 Cloud
Sign in
New to kosa8 Cloud? Create an organization
Already have an organization? Sign in
Sign in or create your organization to connect the kosa8 app on this computer. You will be asked to confirm before it is connected.
Forgot your password, or never set one?
Or sign in with an API key
Paste an API key with the admin scope. It is exchanged for a 12-hour session; the key itself is not stored in this browser.
Or sign in with single sign-on
For organizations that have connected their identity provider (Okta, Microsoft Entra ID, Google Workspace and others) and verified their email domain.
New to kosa8 Cloud? Create an organization
Add a payment method next to start running sandboxes and functions; your signup credit pays for the first usage.
Your organization is ready. This is its admin API key. It is shown once and is how you sign in here until you set up single sign-on, so save it in your password manager now.
| Name | Role | Added | Last sign-in |
|---|
Owners and admins manage everything; only an owner grants or removes the owner role. Developers run sandboxes and functions and make their own API keys. Viewers read only. Removing a member or changing their role ends their sessions and revokes the keys made for them.
Single sign-on OIDC
Verify each domain with a DNS TXT record. Only addresses in verified domains can sign in; once verified, “Continue with SSO” also finds your organization from a work email. Direct sign-in link: –
| Domain | TXT name | TXT value | Status |
|---|
| ID | State | Template | Started from | Region | Running | Asleep | Cost |
|---|
Billed per second while running: $0.048 per vCPU-hour and $0.0154 per GB of RAM per hour (EU; 1.2× in US and AP). An idle sandbox sleeps and then pays only $0.08 per GB-month for its snapshot; the next command wakes it. Sandboxes on your own hosts carry no compute charge. Costs here are estimates.
| Name | Runtime | Version | Web | Schedule | Last run |
|---|
Recent invocations
| When | Trigger | Version | Status | Run | Total | Error |
|---|
| Name | Key | Scopes | Created | Last used | Status |
|---|
Run k8agent on your own servers and they join this organization's capacity: only your sandboxes and functions run there, with no compute charge, for $0.20 per host-hour. Make a registration token, then on the server run cloud/host/byoc-install.sh with it.
Registration token, shown once:
Hosts
| ID | State | Region | Cores | RAM free | Sandboxes | Last heartbeat |
|---|
Registration tokens
| Name | Created | Expires | Hosts | Status |
|---|
Choose how to pay
A plan covers kosa8 on your own machines and comes with kosa8 Cloud credit every month; usage past the credit is billed on the same subscription. Or pay as you go.
| Item | Amount |
|---|
Estimated from each sandbox's running and sleeping time, each function call's run time, and the hours your own hosts are registered. Your plan's monthly credit comes off first, then the signup credit. The invoice is computed from metered usage.