nvidia/nemoclawRun agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations, OpenShell-backed state persistence, and lifecycle operations through the NemoClaw CLI and its agent-specific aliases.
Supported agents:
For capabilities, architecture, security controls, and the full feature list, see the NemoClaw documentation.
Use the starter prompt when you want Cursor, Claude Code, Codex, Copilot, or another local coding agent to install NemoClaw with you.
Copy the NemoClaw starter prompt.
The prompt tells your agent to use NemoClaw docs and skills, ask one question at a time, run commands only with your approval, and keep secrets out of chat.
Review Prerequisites before installing.
On a supported DGX or Windows Subsystem for Linux (WSL) host, press Enter at the Run express install with these settings? [Y/n]: prompt to use the recommended preset settings for that platform.
Express install mode installs OpenClaw by default.
If you accept, refer to NemoClaw Quickstart with OpenClaw.
Enter n if you want to choose Hermes or LangChain Deep Agents Code, a sandbox name, an inference provider, and a model interactively.
When connecting to a Hermes sandbox from a light terminal, NemoClaw may install a managed nemoclaw-light Hermes skin for readable assistant text; it removes that managed skin state again when the terminal no longer needs it and preserves any user-selected Hermes skin.
| Agent | Guide |
|---|---|
| OpenClaw (default) | Quickstart with OpenClaw |
| Hermes | Quickstart with Hermes |
| LangChain Deep Agents Code | Quickstart with LangChain Deep Agents Code |
Refer to the following pages on the official documentation website for more information on NemoClaw.
| Page | Description |
|---|---|
| Overview | What NemoClaw does and how it fits together. |
| Architecture Overview | High-level overview of the host CLI, agent integration layer, blueprint, sandbox lifecycle, and protection layers. |
| Ecosystem | How OpenClaw, OpenShell, and NemoClaw form a stack and when to use NemoClaw versus OpenShell alone. |
| Architecture Details | Detailed description of agent integration structure, blueprint lifecycle, sandbox environment, and host-side state. |
| Prerequisites | Hardware, software, and supported platforms, with any platform-specific pre-setup. |
| Choose an Inference Provider | Supported providers, validation, and routed inference configuration. |
| Network Policies | Baseline rules, operator approval flow, and egress control. |
| Customize Network Policy | Static and dynamic policy changes, presets. |
| Security Best Practices | Controls reference, risk framework, and posture profiles for sandbox security. |
| Sandbox Hardening | Container security measures, capability drops, process limits. |
| CLI Commands | Full NemoClaw CLI command reference. |
| Troubleshooting | Common issues and resolution steps. |
Join the NemoClaw community to ask questions, share feedback, and report issues. NemoClaw is an alpha project, so maintainers review issues, discussions, and pull requests on a best effort basis without guaranteed response timelines.
| Need | Channel |
|---|---|
| Setup or usage questions | GitHub Discussions or Discord |
| Reproducible bugs | GitHub Issues |
| Feature proposals | Start with GitHub Discussions, then open an issue when the scope is clear |
| Examples | Community Examples · Contribute an example |
| Current priorities | Current Priorities |
| Contribution help | CONTRIBUTING.md |
| Security vulnerabilities | Use the private channels in SECURITY.md; do not open public issues |
We welcome contributions. See CONTRIBUTING.md for development setup, coding standards, and the PR process.
Prepare a source checkout without creating a runtime sandbox:
./scripts/dev-setup.sh
Or ask a compatible coding agent to use the repository's contributor-onboarding skill:
Set up this machine as a NemoClaw contributor and prepare it for a first PR.
The contributor path is separate from the end-user installer above.
The default and --repair modes change only repository-local dependencies, builds, and hooks.
Use ./scripts/dev-setup.sh --expose-cli only when you explicitly want a host-visible development CLI.
Use ./scripts/dev-setup.sh --with-runtime only when your change needs sandbox validation; that approved flow also opts into CLI exposure.
NVIDIA takes security seriously. If you discover a vulnerability in NemoClaw, DO NOT open a public issue. Use one of the private reporting channels described in SECURITY.md: