OpenHands Canvas runs agents on local backends

Blog 13 min read

The OpenHands Agent Canvas operates as a self-hosted control center for running multiple coding agents, a capability detailed in a post by the GitHub Projects Community that garnered 16.1K views. This tool transforms local development environments into an always-on engineering team by orchestrating diverse agent backends without context loss. True autonomy demands the flexibility to switch infrastructure layers dynamically while maintaining smooth integration with existing workflow tools.

Readers will learn how the system supports OpenHands, Claude Code, Codex, or any ACP-compatible agent across local, Docker, VM, and cloud backends. We examine the architecture that enables users to bring their own LLM and agent server infrastructure while creating automations that integrate with Slack, GitHub, and Linear. The discussion covers the practical implications of deploying a unified interface for heterogeneous agent fleets.

The analysis draws directly from the official announcement posted on X (formerly Twitter) by @GithubProjects on Jul 7, 2026. This source confirms the tool's capacity to manage complex orchestration tasks without relying on proprietary cloud lock-ins. By using open specifications, developers can maintain full ownership of their computational resources while scaling agent operations effectively.

The Role of OpenHands Agent Canvas in Modern Agent Orchestration

OpenHands Agent Canvas as a Self-Hosted ACP Orchestrator

Think of OpenHands Agent Canvas as a self-hosted control center managing diverse coding agents across local, cloud, and remote backends. The platform enables engineers to run OpenHands, Claude Code, Codex, or any ACP-compatible agent within a unified interface. By abstracting backend complexity, the system maintains an always-on engineering team capable of persistent operation regardless of local machine state. This capability stems from decoupling the orchestration layer from execution environments. Users switch between local, Docker, VM, and cloud backends without losing context, a move necessary for maintaining continuity in long-running tasks.

Deploying Multi-Backend Automations with Slack and Linear

Engineers build Slack and Linear automations by routing events through local or remote agent backends without breaking session state. This configuration allows teams to trigger OpenHands, Claude Code, or Codex via webhooks while preserving the full conversation history across infrastructure boundaries. The system executes logic on Docker containers or virtual machines, isolating tool use from the host operating system.

Should you self-host coding agents to maintain data sovereignty? Running the OpenHands Agent Canvas locally ensures proprietary code never leaves the corporate network perimeter. The architecture supports switching between a developer's laptop and a central VM cluster instantly. Context persistence mechanisms serialize the agent's working memory, enabling smooth handoffs between environments. Users bring their own LLM infrastructure to avoid vendor lock-in while using the same orchestration layer.

Operational overhead increases notably. Managing Docker images and network policies requires more effort than consuming a managed API. This cost grants precise control over tool permissions and execution logs. Teams can configure specific agents for distinct tasks, such as using Codex for documentation and OpenHands for refactoring, all coordinated through a single interface. Such flexibility supports complex workflows where security boundaries dictate execution location.

Validation steps confirm ACP compatibility by checking if the system executes OpenHands, Claude Code, or Codex across diverse runtimes. Deploying on user-owned infrastructure allows organizations to bypass vendor lock-in pricing, limiting expenses to compute resources and API fees. This approach shifts the operational burden to the engineering team, which must now manage security patches and uptime guarantees previously handled by the vendor. The OpenHands Agent Canvas turns coding agents into a self-hosted, always-on engineering team, but only if the underlying network permits persistent connections to external tool APIs without aggressive timeout policies.

Local-First Architecture and Backend Sandboxing in OpenHands

OpenHands executes agent logic across four distinct environments: local machines, Docker containers, Virtual Machines, and private infrastructure. This local-first default ensures proprietary code remains on-premises unless explicitly routed to external servers. The system isolates every task within a sandbox, preventing arbitrary commands from compromising the host operating system. Context persistence allows the orchestration layer to maintain state while switching between these backends without data loss.

Operators can toggle between a local Docker instance and a remote VM while the agent retains its conversation history and file system view. This capability supports a model-agnostic workflow where users bring their own LLM keys or apply cost-billed provider layers. Self-hosting introduces latent operational overhead compared to managed SaaS alternatives. Teams must manage their own container registries and handle security patching for the underlying execution environments. Absolute control over the software supply chain and elimination of third-party data scraping risks offset this drawback. By decoupling the interface from the execution backend, the architecture enables granular security policies that cloud-only assistants cannot match. Builders gain the ability to audit every command an agent attempts before execution occurs.

Smooth Context Persistence During Backend Switching

State continuity survives backend migration by serializing the agent state to a persistent volume before execution handoff. When an operator switches from a local process to a Docker container, the system decouples the logical workflow from the physical runtime environment. This mechanism prevents context loss during backend switching, ensuring that conversation history and file system modifications remain intact regardless of the underlying sandbox.

The choice between Docker and VMs dictates the isolation boundary for these persistent sessions. Docker offers rapid startup times suitable for ephemeral tasks, whereas Virtual Machines provide hardware-level separation required for high-risk code execution. Unlike local-only helpers, the cloud coding agents maintain server-side processes that survive laptop shutdowns, enabling true 24/7 operation. This architecture allows teams to scale from individual prototyping on local machines to sustained, automated engineering workflows on remote infrastructure without manual state transfer.

Maintaining this continuity introduces a dependency on the storage backend's availability and latency. If the persistent volume locks or lags during a handoff, the orchestration layer may timeout, forcing a restart of the agent loop rather than a smooth resume. Builders must configure storage backends with concurrent read-write access to prevent race conditions when multiple agents attempt to access the same context window.

Docker Containers Versus Virtual Machines for Agent Isolation

Docker containers prioritize startup latency while Virtual Machines enforce hardware-level boundaries for execution. Choosing between these backends determines the isolation depth available to agentic workflows. Docker uses kernel namespaces to separate processes, offering rapid scaling for ephemeral coding tasks. Conversely, Virtual Machines virtualize the underlying hardware, creating a stricter perimeter against malicious code execution. Organizations maintaining strict data sovereignty often prefer the latter so proprietary code never traverses public internet boundaries unless explicitly configured. Resource consumption defines the constraint. VMs incur higher overhead than containerized counterparts.

Deploying and Configuring the Agent Control Center

Defining the Local-First Agent Control Center Architecture

The local-first architecture supports running agents across local, cloud, and remote backends to maintain data sovereignty. This control center orchestrates workloads across four distinct environments: local machines, Docker containers, Virtual Machines, and private company infrastructure. Unlike proprietary assistants requiring cloud execution, the platform runs entirely on user-owned systems unless explicitly configured for remote backends. The OpenHands project has accumulated over 65,000 stars on GitHub, indicating a significant level of community engagement and adoption within the open-source system.

  1. Install the core platform to access the local developer workflow for rapid prototyping.
  2. Deploy agents within isolated sandboxes to ensure arbitrary commands cannot compromise the host system.
  3. Bring your own LLM and agent server infrastructure to swap models dynamically.

Organizations using this model bypass vendor lock-in for the agent platform itself, limiting expenses to compute resources and API usage. The model-agnostic design prevents dependency on a single LLM vendor, allowing teams to adjust providers based on performance or pricing fluctuations. Self-hosted tasks shift costs to underlying compute resources and model usage fees rather than software licensing. Teams gain full code custody and flexible backend switching but assume responsibility for maintaining the underlying sandbox environments. This architecture suits regulated industries where proprietary code must never leave controlled infrastructure.

Configuring Custom LLMs and Switching Agent Backends

Bring your own LLM and agent server grid to enable custom integration. The OpenHands Cloud platform was fully released on March 31, 2025, transitioning from beta or limited availability to a general release state.

  1. Specify the base URL and API key for your chosen provider within the LLM profile.
  2. Select a target runtime, such as a local process or an isolated Docker container, to establish the execution boundary.
  3. Initiate the session to load the agent state into the new environment.

This process decouples the interface from the underlying infrastructure, allowing operators to shift workloads without losing context. The system allows switching between local, Docker, VM, and cloud backends without losing context. Startups apply this model-agnostic design to experiment with different providers for cost-efficiency while retaining the same agent interface. Cloud execution offers always-on availability but depends on network throughput, whereas local execution ties up host resources. Builders must weigh data sovereignty requirements against the convenience of managed cloud backends when selecting a deployment target. For detailed setup instructions, refer to the OpenHands documentation. AI Agents News recommends validating network policies before deploying to remote.

Resolving Integration Failures in Slack and External Tools

Connectivity issues may arise from configuration errors in the Slack integration setup.

  1. Regenerate workspace credentials and update the configuration to restore API access.
  2. Verify the event subscription URL points to a reachable endpoint if running behind a corporate firewall.
  3. Confirm the agent possesses explicit write permissions for the specific channels targeted by automation rules.

Hybrid deployments require careful network configuration to ensure local instances can receive incoming webhooks from cloud-based collaboration tools. Teams using private company infrastructure must expose a secure tunnel or reverse proxy to allow external events to trigger local agent workflows. Without this bidirectional path, the system accepts commands but cannot report status updates or errors back to the user. The operational cost involves maintaining a persistent, secure tunnel rather than relying on simple polling mechanisms that increase latency.

This configuration gap creates a silent failure mode where agents appear active but remain disconnected from team communication streams.

Automating Engineering Workflows with Integrated AI Agents

Defining the ACP-Compatible Agent Integration Layer

Teams operate the OpenHands Agent Canvas as a self-hosted control center running OpenHands, Claude Code, Codex, or any ACP-compatible agent across diverse environments. This layer hides backend friction so operators shift between local machines, Docker containers, Virtual Machines, and private company infrastructure without dropping execution context. Proprietary code stays inside isolated sandboxes, a requirement for strict data sovereignty. Disparate agents merge into one engineering team interface where Slack, GitHub, and Linear trigger persistent automation. The OpenHands Cloud platform reached general release on March 31, 2025, moving past beta limits.

Your own LLM and agent server platform demands coordination. Data sovereignty rises, yet the operator owns backend availability. Managed solutions offer vendor uptime guarantees; self-hosted deployments depend on user infrastructure to keep the platform always-on. Control comes first here. Teams maintain their own compute resources to sustain operations.

Automating Engineering Workflows Across GitHub, Slack, and Linear

Workflows link agents to Slack, GitHub, and Linear, unifying task management through simple triggers. A single message in a communication channel kicks off complex coding sequences across distributed backends. A developer posts a command in Slack, prompting an agent to fetch a Linear issue, analyze requirements, and generate a GitHub pull request without manual context switching. State persists whether the agent executes in a local Docker container or a remote Virtual Machine. Infrastructure location does not break consistency.

Integration Point Primary Function Data Sovereignty Model
Slack Command initiation and status alerts Depends on host deployment
Linear Issue tracking and requirement parsing Local or private cloud
GitHub Code submission and review cycles Determined by backend

Strict data governance remains possible because agent execution stays inside private company system while interactions happen via public SaaS tools. The "local-first" architecture supports running agents within isolated sandboxes or on-premises. Public internet boundaries protect proprietary code unless explicit configuration allows traversal. Cloud-only solutions cannot match this isolation level.

OpenHands vs Claude Code: Selecting the Right Agent Backend

Choice depends on prioritizing local data sovereignty or managed cloud convenience. Native execution runs directly inside Docker containers or on Virtual Machines, keeping proprietary code within isolated network boundaries. Routing tasks through Claude Code uses external API endpoints, simplifying setup while requiring external connectivity.

Feature Native Agent Claude Code Integration
Primary Environment Local Docker / VM Cloud API / Remote
Data Residency Fully On-Premises External Processing
Context Switching Smooth across backends Requires API handoff
Best For Regulated Industries Rapid Prototyping

Engineers swap these LLM providers freely without rewriting underlying automation logic thanks to the integration layer. Model-agnostic design prevents vendor lock-in, a frequent constraint in single-provider coding assistants. Cost optimization happens by switching between different LLM providers based on current pricing fluctuations. Managed service convenience battles against security guarantees from self-hosted deployment. Organizations treating code as a protected asset require private agent server isolation. Public commodity status fits managed endpoints improved.

About

Diego Alvarez, Developer Advocate at AI Agents News, brings practical, hands-on expertise to this analysis of the OpenHands Agent Canvas. His daily work involves building and benchmarking coding agents across frameworks like CrewAI and AutoGen, giving him direct insight into the challenges of multi-agent orchestration and backend integration. Unlike theoretical overviews, Diego's evaluation focuses on real-world deployment, examining how the Canvas manages local and cloud backends while coordinating tools like Claude Code and Codex. As someone who routinely tests agent reliability and cost-efficiency for engineering teams, he is uniquely positioned to assess the Canvas's claim as an "always-on engineering team." His role at AI Agents News centers on helping technical founders and engineers navigate the complex environment of autonomous coding tools without the hype. By connecting his experience with ACP-compatible agents to the specific capabilities outlined in recent community reports, Diego provides the concrete, builder-focused guidance necessary for evaluating this self-hosted control center.

Conclusion

Scaling autonomous coding agents exposes a critical friction point: the tension between data sovereignty and operational convenience. While cloud-only solutions offer ease of entry, they create an unsustainable dependency on external API boundaries for proprietary logic. Organizations that treat source code as a protected asset must prioritize native execution within isolated Docker containers or virtual machines to maintain strict governance. Relying on external processing for sensitive tasks introduces unacceptable latency and compliance risks that managed endpoints cannot resolve. The strategic path forward involves deploying a hybrid architecture where the orchestration layer remains on-premises while selectively routing non-sensitive prototyping tasks to cloud providers. This approach secures the core intellectual property while retaining flexibility. Teams should immediately audit their current agent deployments to identify any workflows where proprietary code traverses public internet boundaries without explicit encryption or sandboxing. Start by isolating one high-value development pipeline this week and migrating its execution environment to a local Docker instance to validate the security perimeter before expanding the footprint. This concrete step ensures that future scaling efforts rest on a foundation of verified isolation rather than assumed trust.

Frequently Asked Questions

You can run OpenHands, Claude Code, Codex, or any ACP-compatible agent. This flexibility allows teams to switch between diverse runtimes without losing context during complex engineering tasks.

The platform switches between local, Docker, VM, and cloud backends seamlessly. Users maintain full conversation history while moving across infrastructure boundaries to ensure persistent operation.

Create automations that integrate directly with Slack, GitHub, and Linear platforms. This connectivity enables engineers to route events through backends while preserving session state effectively.

Bring your own LLM and agent server infrastructure to avoid vendor lock-in. This approach ensures proprietary code remains within your controlled perimeter while scaling operations.

Managing Docker images and network policies requires more effort than managed APIs. However, this cost grants precise control over tool permissions and execution logs for security.

References