NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell

NVIDIA NemoClaw is an open source reference stack for running always-on AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, a hardened blueprint, routed inference, network policy, and lifecycle management through a single CLI.

Supported agents:

• OpenClaw (default)
• Hermes
• LangChain Deep Agents Code

For capabilities, architecture, security controls, and the full feature list, see the NemoClaw documentation.

Get Started

Start with Your Coding Agent

Use the starter prompt when you want Cursor, Claude Code, Codex, Copilot, or another local coding agent to install NemoClaw with you.

Copy the NemoClaw starter prompt.

The prompt tells your agent to use NemoClaw docs and skills, ask one question at a time, run commands only with your approval, and keep secrets out of chat.

Install Using the Interactive Installer in Your Terminal

Review Prerequisites before installing. For Hermes, set NEMOCLAW_AGENT=hermes before running the installer, or use the nemohermes alias after install.

Agent	Guide
OpenClaw (default)	Quickstart with OpenClaw
Hermes	Quickstart with Hermes
LangChain Deep Agents Code	Quickstart with LangChain Deep Agents Code

Documentation

Refer to the following pages on the official documentation website for more information on NemoClaw.

Page	Description
Overview	What NemoClaw does and how it fits together.
Architecture Overview	High-level overview of Plugin, blueprint, sandbox lifecycle, and protection layers.
Ecosystem	How OpenClaw, OpenShell, and NemoClaw form a stack and when to use NemoClaw versus OpenShell alone.
Architecture Details	Detailed description of Plugin structure, blueprint lifecycle, sandbox environment, and host-side state.
Prerequisites	Hardware, software, and supported platforms, with any platform-specific pre-setup.
Inference Options	Supported providers, validation, and routed inference configuration.
Network Policies	Baseline rules, operator approval flow, and egress control.
Customize Network Policy	Static and dynamic policy changes, presets.
Security Best Practices	Controls reference, risk framework, and posture profiles for sandbox security.
Sandbox Hardening	Container security measures, capability drops, process limits.
CLI Commands	Full NemoClaw CLI command reference.
[Troubleshooting](https://docs.nvidia.com/nemoclaw/latest/