kora is an open source control plane for running agent factories in production. An agent on a laptop runs with its developer's credentials and leaves no audit trail of what it did. kora makes those agents safe to run at scale.
kora is not an agent framework, a model router, or an LLM wrapper. It runs the agent harnesses you already use, such as Claude Code, Codex and OpenCode, on Kubernetes, and governs everything they do.
- Agent execution. Every agent works in a durable run inside its own sandbox, started by a webhook, queue, schedule, the API or a person.
- Identity. Every agent has its own identity. Autonomous agents act with their own access, and delegated agents act for the person who started the run and can never do more than that person can.
- Policy. Every action by a person or an agent is evaluated against policy before it runs.
- Connectivity. Agents never handle credentials. kora intercepts outbound calls and injects a scoped, just-in-time credential.
- Try kora locally:
make upin runkora/examples installs kora on a local k3d cluster and applies one of its examples. - Run kora in a Kubernetes cluster: Install it with the deployment guide.
- Work on kora: Get it running locally with the local development guide.
In kora, an agent factory is a group of agents that are connected, each with a different role, and work towards a goal. A factory can be wired through various triggers, and include human gates to observe and interact with the factory at any step.
- Autofix: Hunts for bugs, verifies issues and fixes them as pull requests.
- SRE: Triages alerts, proposes fixes as pull requests and sweeps the cluster's costs.
- Website: What kora is and who it's for.
- Concepts: Runs, sandboxes, identity and connectivity.
- Architecture: How kora works.
- Docs: Comprehensive platform documentation.
- Contributing: Start here if you want to contribute.
- Examples: Try kora locally with the quickstart examples.
Ask questions, get help and show what you've built on Discord. Report bugs and request features in GitHub issues.
Report vulnerabilities by following the security policy. Do not open a public issue for a suspected vulnerability.
Licensed under the Apache License, Version 2.0. See LICENSE.