# Namespace

The dev platform for the next 100 billion commits

Source: https://wheredoirunthis.com/products/namespace · JSON: https://wheredoirunthis.com/api/products/namespace · Read on 2026-10-12

## At a glance

- Type: IaaS
- Kind: Hosted
- Isolation: Virtual machine
- Free tier: Not documented
- Starting price: $100/mo
- GPU: No
- Regions: Not disclosed
- Coverage: 27 of 61 assessed capabilities supported
- Agent readiness: read 10 of 11 signals, drive 9 of 11 signals

## Links

- Homepage: https://namespace.so/
- Docs: https://namespace.so/docs
- Pricing: https://namespace.so/pricing
- Repository: https://github.com/namespacelabs/foundation

## Pricing

- Model: Plan tier + usage (unit-minutes compute + devbox-minutes + Docker builds + storage/cache GB); platform multipliers (Linux 1 / Windows 2 / macOS 10 / Linux-on-Apple-Silicon 7)
- Unit: unit-minute (1 vCPU·2GB·min × platform multiplier); devbox-minute; per Docker build; per GB cache/storage
- Free tier: Not documented

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Developer | Pay as you go ($0 base) | Pay-per-use compute and Devboxes; $0 subscription base is not free compute. |  [source](https://namespace.so/pricing) |
| Team | $100/mo | 100K unit-minutes + 1K Docker builds; increased concurrency (64 vCPU Linux); max 5h instances; 5,000 GB-hr snapshot + 3,000 GB-day cache free. Included unit-minutes are generic compute, not a disclosed Devbox-minute credit. |  [source](https://namespace.so/pricing) |
| Business | $250/mo | 250K unit-minutes + 2.5K Docker builds; high concurrency (160 vCPU Linux); max up to 24h instances; 15,000 GB-hr snapshot + 9,000 GB-day cache free; 30-day audit retention. Included unit-minutes are generic compute, not a disclosed Devbox-minute credit. |  [source](https://namespace.so/pricing) |
| Enterprise | custom |  | Volume discounting; max 24h instances; custom concurrency; audit log export; Enterprise SSO; RBAC; custom log/metric sinks; dedicated egress pools. [source](https://namespace.so/pricing) |

- Overages: Per-shape unit-minute overage (Linux 1vCPU/2GB $0.0015/min → 32vCPU/512GB $0.384/min); macOS 10x, Windows 2x; Docker builds $10/1,000; storage/cache per GB
- Card required: No
- Source: https://namespace.so/pricing

## Runtime

- **GPU & accelerators**: No — "CPU-focused (AMD EPYC / AmpereOne / Apple Silicon). No GPU shapes in pricing." (source: pricing) (confidence: medium)
- **BYOC (Bring your own cloud)**: No [source](https://namespace.so/devbox)
- **Secrets management**: Namespace Vault stores secrets; blueprint/spec references inject into workloads, or egress INJECT resolves outside the workload. [source](https://namespace.so/docs/architecture/storage/secrets.md)
- **Storage options**: Devboxes retain persistent block storage across stops (Devbox-specific disk price undisclosed). Shared platform also provides persistent-volume disk snapshots, cache volumes, artifact object storage and private registry; cache and artifact billing must not be substituted for Devbox persistent-disk pricing. — "CreateArtifact/FinalizeArtifact and signed PUT/download URLs document platform object storage; Devbox lifecycle documents persistent files." [source](https://namespace.so/docs/architecture/storage/artifact-storage.md) (confidence: high)
- **Supported workloads**: ci-cd-runners, github-actions, docker-builds, devboxes, ai-coding-agents, build-caching, compute/memory-heavy-tests — "Devbox: human development, coding-agent command/file/build/test execution, Linux nested virtualization and macOS computer controls. Separate offerings: CI runners, Docker/Bazel build execution and caches. Windows CI availability is not Windows Devbox availability." [source](https://namespace.so/) (confidence: high)
- **Persistence**: Devbox stops preserve persistent storage; deletion removes it. Ephemeral configuration supports stopped-retention policies. Stopping does not establish preservation of running processes. — "Persistent lifecycle and ephemeral stoppedRetentionMs in the TypeScript blueprint API are distinct." [source](https://namespace.so/docs/devbox/lifecycle.md) (confidence: high)
- **Data jurisdiction**: US legal entity; global processing by default; enterprise region-exclusive data residency still globally replicates operational metadata. [source](https://namespace.so/docs/workspaces/data-residency.md)
- **Resource limits & quotas**: Devboxes: Linux S/M/L/XL max 4/8/16/32 vCPU and 8/16/32/64GB; macOS M/L only. Devbox lifecycle maximums Developer 4h, Team 5h, Business 24h apply even while busy; auto-stop default 15min, configurable. Separate pricing Compute table says Developer 3h and Linux concurrency 32/64/160/custom vCPU; do not apply that 3h row as the Devbox-specific limit. — "SKU-specific duration table describes Devboxes; distinct generic compute pricing table retained as context." [source](https://namespace.so/docs/devbox/lifecycle.md) (confidence: high)
- **SDK languages**: TypeScript, Go [source](https://namespace.so/docs/reference/sdk.md)
- **Network & egress controls**: Outbound filtering, PROXY routing and INJECT headers from Vault; INJECT requires deep packet inspection and keeps secrets outside the workload. [source](https://namespace.so/docs/security/egress-policy.md)
- **Snapshots & forks**: Automatic persistent-volume snapshots on shutdown; initialize volumes from_snapshot_id. Live VM memory restoration/forking not documented. [source](https://namespace.so/docs/architecture/storage/persistent-volumes.md)
- **Deployment methods**: cli, sdk, api, dashboard, container-image, dockerfile, template, mcp — "Devbox CLI/SDK/dashboard provisioning, custom Linux images/Dockerfiles and reusable blueprints; hosted MCP write tools create/start/stop/delete Devboxes. Git repository checkout is not push-to-deploy." [source](https://namespace.so/docs/devbox/index.md) (confidence: high)
- **Isolation**: Virtual machine [source](https://namespace.so/devbox)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "Namespace publishes Devbox skills in namespacelabs/agent-skills; npx skills add namespacelabs/agent-skills." [source](https://namespace.so/docs/reference/devbox-cli/agent-skills.md) |
| AI app builder | Not supported | "No affirmative AI app builder offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Autonomous QA agent | Not supported | "No affirmative Autonomous QA agent offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Built-in coding agent | Not supported | "No affirmative Built-in coding agent offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| BYOK for LLMs | Partially supported | "Start setup with your Anthropic API key, generate the service key, and configure the webhook secret." [source](https://namespace.so/docs/integrations/claude.md) |
| Credential-injection proxy | Supported | "INJECT rules set an HTTP header from Namespace Vault; resolved outside the workload and never exposed to it. Requires deep packet inspection." [source](https://namespace.so/docs/security/egress-policy.md) |
| LLM gateway | Not supported | "No affirmative LLM gateway offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| MCP client | Not supported | "No affirmative MCP client offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| MCP-server hosting | Not supported | "No affirmative MCP-server hosting offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| MCP server | Supported | "https://mcp.namespace.so/mcp offers read/write Devbox lifecycle and command tools; /mcp/readonly investigates jobs, builds, usage and status. Browser authorization required." [source](https://namespace.so/docs/reference/mcp/index.md) |
| Model inference API (first-party) | Not supported | "No affirmative Model inference API (first-party) offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Preinstalled coding agent | Not supported | "Start your agent in the session, for example claude, codex, or amp." [source](https://namespace.so/docs/devbox/connecting.md) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "All ingresses use managed TLS certificates." [source](https://namespace.so/docs/architecture/networking/ingress.md) |
| Custom domains | Partially supported | "Registering a custom ingress domain is limited to enterprise customers." [source](https://namespace.so/docs/architecture/networking/ingress.md) |
| Direct public IPv6 | Not supported | "No affirmative Direct public IPv6 offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Edge KV store | Not applicable | "Compute/development platform, not a managed data-layer offering." [source](https://namespace.so/docs/index.md) |
| Egress controls | Supported | "Egress policies control outbound connections: filter traffic, inject Vault secrets, or route through another domain." [source](https://namespace.so/docs/security/egress-policy.md) |
| Email send / receive | Not supported | "No affirmative Email send / receive offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Public preview URLs | Supported | "Shareable URLs publish an HTTP service on a devbox.so address. Require owner/workspace authentication; not anonymous public deployment." [source](https://namespace.so/docs/devbox/url.md) |
| Private networking | Supported | "Workloads within a workspace are isolated by default but can be configured to allow communication over a private network." [source](https://namespace.so/docs/architecture/networking/security.md) |
| Built-in reverse proxy | Supported | "HTTPS-terminating reverse proxy that communicates with the container over plain HTTP." [source](https://namespace.so/docs/architecture/networking/ingress.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Partially supported | "Shareable URLs require authentication; private owner or workspace member access. Not a general customer identity backend." [source](https://namespace.so/docs/devbox/url.md) |
| BYOC | Not supported | "No affirmative BYOC offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Deploy into customers' VPCs | Not supported | "Federation enables resource access between Namespace and AWS/GCP." [source](https://namespace.so/docs/federation/index.md) |
| Secrets management | Supported | "Secrets - loads secret values from the Namespace vault; env with from_secret_id in a spec file." [source](https://namespace.so/docs/devbox/blueprint.md) |
| Self-host / OSS core | Not supported | "Foundation is a composable CUE application build/test/deployment platform built around Kubernetes; nsc client lives in cmd/nsc." [source](https://github.com/namespacelabs/foundation) |
| Sharing | Supported | "workspace allows access to members of the workspace; shareable devbox.so URL wakes stopped Devboxes." [source](https://namespace.so/docs/devbox/url.md) |
| SSO / SAML | Partially supported | "Enterprise SSO; enterprise-gated." [source](https://namespace.so/pricing.md) |
| Teams | Supported | "Team and Business plans; workspaces and enterprise RBAC." [source](https://namespace.so/pricing.md) |
| Workload identity | Supported | "Automated workloads exchange their OpenID Connect identity for short-lived, scoped Namespace credentials; workloads on Namespace receive a credential via NSC_TOKEN_FILE." [source](https://namespace.so/docs/reference/api.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "devbox create provisions development environments; official devbox and nsc CLIs." [source](https://namespace.so/docs/reference/devbox-cli/create.md) |
| E2B-compatible API | Not supported | "No affirmative E2B-compatible API offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Filesystem API | Supported | "devbox.fs transfers files, reads/writes bytes, and manages remote files/directories." [source](https://namespace.so/docs/reference/typescript-sdk/devbox/files.md) |
| Git deploy | Not supported | "No affirmative Git deploy offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| HTTP data API | Not applicable | "Compute/development platform, not a managed data-layer offering." [source](https://namespace.so/docs/index.md) |
| OpenAPI spec | Not supported | "No affirmative OpenAPI spec offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Private container registry | Supported | "Container Registry $0.2/GB-mo." [source](https://namespace.so/pricing.md) |
| Public API | Supported | "Namespace API defined in Protocol Buffers, published at buf.build/namespace/cloud; gRPC and Connect." [source](https://namespace.so/docs/reference/api.md) |
| SDK | Supported | "Maintained and supported TypeScript and Go SDKs; generated clients in other languages are distinct." [source](https://namespace.so/docs/reference/sdk.md) |
| SSH access | Supported | "Each Devbox is a remote machine with persistent storage, reachable over SSH or from your local IDE." [source](https://namespace.so/docs/devbox/index.md) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "No affirmative Cloud-init / ignition config offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Desktop / computer-use sandbox | Supported | "Capture macOS Devbox screen as PNG bytes and click framebuffer coordinates; macOS only." [source](https://namespace.so/docs/reference/typescript-sdk/devbox/display.md) |
| GPU compute | Not supported | "No affirmative GPU compute offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Live-state (memory) snapshots | Not supported | "No affirmative Live-state (memory) snapshots offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Multi-region | Supported | "Region-exclusive data residency requires an enterprise plan; default data may be processed across global infrastructure." [source](https://namespace.so/docs/workspaces/data-residency.md) |
| Object storage | Supported | "Artifact storage offers highly-available, high throughput object storage. CreateArtifact obtains a pre-signed upload URL; FinalizeArtifact commits it; ResolveArtifact returns a signed download URL." [source](https://namespace.so/docs/architecture/storage/artifact-storage.md) |
| Persistent disk | Supported | "Stopped Devboxes retain all persistent storage and resume in seconds." [source](https://namespace.so/docs/devbox/lifecycle.md) |
| Sandbox templates / custom images | Supported | "Blueprints define image, environment and secrets for reusable Devbox creation." [source](https://namespace.so/docs/devbox/blueprint.md) |
| Scale to zero | Supported | "Starts when you connect, stops when it goes idle, and keeps its persistent storage across both." [source](https://namespace.so/docs/devbox/lifecycle.md) |
| Selectable isolation runtime | Not supported | "Namespace gives every agent a full VM with all your dependencies." [source](https://namespace.so/devbox) |
| Snapshots / forking | Supported | "Data is automatically snapshotted when an instance shuts down. New persistent volumes can be initialized from a specific snapshot using from_snapshot_id." [source](https://namespace.so/docs/architecture/storage/persistent-volumes.md) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not applicable | "Compute/development platform, not a managed data-layer offering." [source](https://namespace.so/docs/index.md) |
| Ephemeral instant DB (no-signup) | Not applicable | "Compute/development platform, not a managed data-layer offering." [source](https://namespace.so/docs/index.md) |
| First-party database | Not supported | "No affirmative First-party database offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Vector search | Not applicable | "Compute/development platform, not a managed data-layer offering." [source](https://namespace.so/docs/index.md) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Supported | "Managed GitHub Runners support Linux, macOS and Windows; Windows runners require Team or higher." [source](https://namespace.so/pricing.md) |
| Built-in observability | Supported | "GetInstanceMetrics returns CPU/memory/storage series; StreamInstanceLogs and FetchInstanceLogs provide live and historical logs." [source](https://namespace.so/docs/architecture/compute/observability.md) |
| Preview environments | Not supported | "No affirmative Preview environments offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Scheduled tasks | Not supported | "No affirmative Scheduled tasks offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Project template marketplace | Not supported | "No affirmative Project template marketplace offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |
| Durable workflows | Not supported | "No affirmative Durable workflows offering found in captured public documentation/index; not an authenticated capability test." [source](https://namespace.so/docs/llms.txt) |

## Agent readiness

### Read: 10 of 11 signals present

10/11 signals (7 full, 3 partial)

- Llms txt: pass — "Substantive /llms.txt (11.5KB) and /docs/llms.txt (30KB), products, pricing and docs links."
- Llms full txt: fail — "/llms-full.txt HTTP 404; index is links, not comprehensive inline full text."
- Robots AI policy: partial — "robots 'User-agent: * Allow: /' — permissive default-allow, no explicit AI-UA mention"
- JSON LD: pass — "Homepage JSON-LD includes SoftwareApplication name/description/installUrl and organization."
- Sitemap: pass — "https://namespace.so/sitemap.xml indexes sitemap-0.xml and docs/sitemap.xml; both fetched and non-trivial."
- Meta quality: pass — "Descriptive <title> + meta description present"
- Markdown negotiation: partial — "Homepage Accept: text/markdown still HTML; pricing.md and docs .md variants are readable Markdown."
- Content efficiency: partial — "Readable text / homepage HTML bytes = 4.95%; script/style/SVG removed."
- Docs discoverable: pass — "Docs first-class (namespace.so/docs; llms.txt index)"
- Pricing machine readable: pass — "Structured pricing + per-shape unit-minute tables + a dedicated /pricing.md markdown version"
- Anti bot: pass — "No challenge on public content (homepage 200)"

### Drive: 9 of 11 signals present

9/11 signals (6 full, 3 partial)

- Public API: pass — "Documented gRPC/Connect API at /docs/reference/api.md."
- Openapi spec: fail — "https://namespace.so/openapi.json and /swagger.json return 404; https://namespace.so/docs/reference/api.md documents Buf Protocol Buffers/gRPC/Connect rather than a linked OpenAPI spec."
- MCP server: pass — "https://namespace.so/docs/reference/mcp/index.md documents https://mcp.namespace.so/mcp and /mcp/readonly, including Devbox lifecycle/commands after workspace authorization."
- SDK packages: pass — "Maintained TypeScript and Go SDKs: /docs/reference/sdk.md."
- Auth docs: pass — "Bearer tokens, OIDC federation, scoped credentials documented in /docs/reference/api.md."
- Agent self serve creds: pass — "nsc token create supports scope/expiry after initial browser-authorized login; programmatic issuance, not unauthenticated signup."
- Webhooks: partial — "https://namespace.so/docs/integrations/claude.md documents an inbound Anthropic lifecycle webhook URL and generated webhook secret; Namespace outbound event delivery and signature algorithm not specified."
- CLI tool: pass — "Official nsc and devbox CLIs."
- Error model: partial — "Documented gRPC/Connect status codes, structured resource-limit errors and typed SDK errors; explicit JSON error wire shape not established."
- Rate limit docs: fail — "Workspace capacity limits are not API request-rate limits; no API rate/response-header contract found in captured documentation."
- Agent config: partial — "One advertised skills repository; /agents.md and /.well-known/agent 404. Dockerfile/config examples are not separate discovery surfaces."

## Coding harnesses

- Claude Code (Anthropic) — "Claude Code setup: claude mcp add --transport http namespace https://mcp.namespace.so/mcp." [source](https://namespace.so/docs/reference/mcp/index.md)
- Codex CLI (OpenAI) — "Codex CLI setup: codex mcp add namespace --url https://mcp.namespace.so/mcp." [source](https://namespace.so/docs/reference/mcp/index.md)
- Cursor (Anysphere) — "Cursor one-click Namespace MCP installation; separately documented Cursor Cloud Agents integration." [source](https://namespace.so/docs/reference/mcp/index.md)
- Amp (Sourcegraph) — "Amp setup: amp mcp add namespace https://mcp.namespace.so/mcp." [source](https://namespace.so/docs/reference/mcp/index.md)
- Gemini CLI (Google) — "Gemini CLI setup: gemini mcp add --transport http namespace https://mcp.namespace.so/mcp." [source](https://namespace.so/docs/reference/mcp/index.md)
- Devin (Cognition) — "Devin on Devboxes integration." [source](https://namespace.so/docs/integrations/devin.md)

Plausible compatibility (derived, not stored):

- Aider
- Antigravity
- Droid
- Goose
- Hermes Agent
- Kilo Code
- Kiro CLI
- OpenCode
- Pi
- Qwen Code

## Compliance & regions

- SOC 2 Type II: certified (scope: hosted) — "Compliance: SOC 2 Type II" [source](https://trust.namespace.so/)
- GDPR: self-attested (scope: hosted) — "Data Processing Agreement published (GDPR compliance document)." [source](https://namespace.so/dpa)
- Regions note: Multi-region compute and all-plan regional preferences documented; region-exclusive workload residency is Enterprise, with globally replicated operational metadata. Devbox site selector/site-latency exposes live availability; iad appears as SDK default. Complete physical Devbox site inventory not enumerated on retained public pages; no CI region list is silently applied to Devboxes.

## Company & presence

- Headquarters: San Francisco, CA (legal address)
- Founded: 2021
- Funding: Seed and Series A combined, $23 million, 2026-03-23
- Funding: Series B, $42 million, 2026-10-05
- Privacy policy: https://namespace.so/privacy
- Terms of service: https://namespace.so/terms
- Blog: https://namespace.so/blog
- Docs: https://namespace.so/docs
- Trust Center: https://trust.namespace.so/
- Console: https://cloud.namespace.so/
- X/Twitter: https://x.com/namespacelabs
- GitHub: https://github.com/namespacelabs
- Careers: https://namespace.so/careers

## Nearby in the atlas

- [Appbox](/products/appbox.md)
- [flintlock](/products/flintlock.md)
- [Scaleway](/products/scaleway.md)
- [Ubicloud](/products/ubicloud.md)
- [Bastion](/products/bastion.md)
- [bhatti](/products/bhatti.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.