TurnPanel, the long version
TurnPanel is a workspace where you, your team and your agents share “spaces.” Claude Code runs inside it beside Codex, Cursor, OpenCode and Grok Build, and each space is its own sandbox. It is free on your own hardware and it is a preview, so this page tells you what works today and what is still a promise.
A sandbox for every agent. As a frog I have firm views on who gets into my pond.
Up and running on a Mac
About fifteen minutes, most of it a one-time download. You need a Mac with Apple silicon on macOS 13 or later. Intel Macs are not supported. No account is required.
- Install it. With Homebrew, which also clears the first-launch block for you:Or download it from turnpanel.com and drag it to Applications.
brew install --cask echowinai/turnpanel/turnpanel - If you downloaded it, let macOS open it. The preview is not yet notarized by Apple, so macOS blocks the first launch. Run this once, or try to open the app and then choose Open Anyway under System Settings, Privacy & Security.
xattr -dr com.apple.quarantine /Applications/TurnPanel.app - Open TurnPanel and wait. The first start downloads the base image for sandboxed spaces. Choose “Run in the background” if you want spaces to keep working with the window closed; it asks for your computer password once.
- Pick your agents. Claude Code, Codex, Cursor, OpenCode and Grok Build. Nothing is preselected. A built-in agent called pi is always on.
- Create your first space. Give it a name and an icon. TurnPanel installs the agents you picked into that space's sandbox.
- Share a folder, if you want. Add a folder from your Mac and choose Can edit or Read only. Nothing on your computer is visible to a space unless you add it.
- Sign in to Claude Code. Click its Sign in button, open the link, and paste back the code. It is your own Claude account. You can skip this and do it later.
- Start your first job. Press Start my first job, pick Claude Code, say what you want done, and send it. The default mode is Ask first.
Clodhopper move: Running that xattr command on something you got from a link in a group chat. It tells macOS to stop checking the app. Only do it for a copy you downloaded from turnpanel.com yourself.
On Windows and Linux
- Windows (x64)It installs, but sandboxed spaces are not available on Windows yet. Your first space runs directly on the computer and setup asks you to confirm. That space can read and change anything your Windows account can, so use it only for work you would run yourself.
- LinuxUse TurnPanel Server. Its installer has a
--personaloption that sets it up for one person. Sandboxed spaces need KVM.
The ideas you need
Spaces
A space is a home for one system: a newsletter, a client, your finances. It holds six things together.
- AgentsClaude Code, Codex, Cursor and the others, side by side
- FilesIts own disk. Agents install, build and run anything there.
- MemoryFacts the space keeps, as plain files. After a job, TurnPanel can propose new memories from the transcript. You can edit, pin, archive or delete them.
- SkillsFolders with a SKILL.md, in the common Agent Skills format. Every change is saved as a revision you can restore.
- AppsSmall tools the agents build, opened from the space
- BrowserA real browser the agents drive, which you can take over
A regular space runs in a lightweight virtual machine with its own network, on Apple silicon Macs and on Linux with KVM. One space cannot reach another. You can make as many as you like.
Agents keep their own identity
TurnPanel installs each official CLI from its maker's own package and you sign in through that agent's own login. In its words, it “doesn't imitate or wrap it in another agent.” Claude Code keeps its own models and its own permission modes. Sign-ins are per person: a teammate or an admin cannot see or use yours.
Jobs, and how much rope the agent gets
A job is one conversation with one agent in one space. Whoever starts it owns it. Everyone in the space can read it, but only the owner can reply.
| Agent | Modes on offer |
|---|---|
| Claude Code | Ask first, Accept edits, Plan only, Never ask |
| Codex | Ask first, Ask when unsure, Never ask |
| OpenCode and Cursor | Ask first, Plan only, Never ask |
| Grok Build | Ask first, Auto |
| pi (built in) | Ask first, Automatic |
Ask first is the default. A mode that acts without asking is shown in a warning color and TurnPanel confirms before you switch to it. When an agent needs you, the job shows “Needs you” and you get a notification, with Allow once or Reject. Claude Code also offers Always allow.
Find any job with Cmd+K on a Mac or Ctrl+K elsewhere.
Claudhopper move: Leave Claude Code on Ask first for a week. You will learn what it actually wants to do before you hand it Never ask.
What it costs
| Plan | Price | What you get |
|---|---|---|
| Free | $0, “free forever” | Every agent, unlimited sandboxed spaces, local models and your own providers, apps, memory, skills, automations, the browser, TurnPanel Server for your team, and air-gapped mode. No account needed. A free account adds web search for agents and a free allowance on TurnPanel's own model. |
| Pro | $20 a month | More web searches, higher allowances on hosted models with a monthly limit you set, and remote access from your phone at its own HTTPS address with passkeys, while your computer is on. |
| Server | Free on your own machines | The team edition. Each person can add Pro for the hosted services. |
| Enterprise | Ask them | Single sign-on, provisioning and audit streams |
You still pay for Claude itself. TurnPanel runs Claude Code on your own Claude sign-in.
For a team: TurnPanel Server
Server is one shared workspace on a Linux machine you control, with sign-in by password or passkey, roles per space, and an audit log. Teammates share a space's memory, skills, apps and jobs, while each person signs in to their own agents and approvals stay with whoever started the job.
Read this first: TurnPanel's own docs say the Server release is in preview and its Docker image is not published yet. The commands below are the ones they say the first release will use.
- Check the host. Linux, with Docker or systemd. Regular spaces need KVM:
ls /dev/kvm. Without it only the unsandboxed Computer space runs. The web interface uses port 7337. - Create the secret key. Keep it out of the data folder and back it up separately.
openssl rand -base64 32 > secret.key chmod 600 secret.key sudo chown 1000 secret.key - Start it.
docker run -d --name turnpanel --restart unless-stopped \ --device /dev/kvm \ --security-opt seccomp=packaging/docker/seccomp.json \ -p 127.0.0.1:7337:7337 \ -v turnpanel-data:/data \ -v "$PWD/secret.key:/run/turnpanel/secret.key:ro" \ -e TURNPANEL_SECRET_KEY_FILE=/run/turnpanel/secret.key \ -e TURNPANEL_PUBLIC_URL=https://turnpanel.example.org \ ghcr.io/echowinai/turnpanel:stable - Get the one-time setup link. It is in the log and lasts 24 hours:
docker logs turnpanel. Open it and create the owner account. - Walk through setup. The machine, its address and HTTPS, optional email, agents and the first space, models, then inviting your team.
To update: back up /data, pull the new image, recreate the container. Go one version at a time. Downgrades are not supported.
Reaching it from your phone
- Pro tunnelThe easy one. Connect your TurnPanel account in Settings, turn on the tunnel under Remote access, and copy its address. No open ports, no domain.
- TailscaleIf TurnPanel detects it, it uses the machine's .ts.net name.
- Your own domainTurnPanel gets and renews a Let's Encrypt certificate. Port 80 has to be reachable.
- Reverse proxyPoint it at port 7337, set
TURNPANEL_PUBLIC_URL, and let WebSockets through. - Plain local networkWorks, but with no passkeys and shorter sessions. On macOS and Windows TurnPanel listens only on the local computer by default.
Security, in their words and ours
- The sandbox. Each regular space is a virtual machine with its own network. Agents run as a non-admin user and see only the folders you share.
- Secrets are write-only. After you save one, only its name, owner and last-used time are shown. They are encrypted and scrubbed from transcripts and logs.
- One door out. All outbound traffic goes through a proxy that logs connections. The policy per space is open (the default), allow-list, or offline.
- An audit log records every action, including refused ones, and is built so tampering shows.
- Telemetry is off by default.
- Air-gapped mode turns off every outside call with one switch. Models then have to be local.
Clodhopper move: Reading “sandboxed” and forgetting you are on Windows, where the sandbox has not shipped. Check which kind of space you are in before you hand an agent Never ask.
What is not there yet
All of this is from TurnPanel's own site and docs, which are refreshingly direct about it.
- The whole product is a preview (“TurnPanel 2 is here as a preview”).
- Open source is announced, not delivered. The core is “being prepared for release” under Apache 2.0. Early contributors get repository access by invitation through their Discord.
- The macOS build is not notarized by Apple yet.
- Windows has no sandbox yet.
- The Server Docker image is not published yet.
- Forking and rewinding a job works on pi jobs only. Other agents do not support it yet.
- Connecting an agent you run yourself uses the space's MCP address and a key. The
turnpanel connectshortcut is not available yet.
TurnPanel or T3 Code?
| TurnPanel | T3 Code | |
|---|---|---|
| The idea | Sandboxed spaces that hold agents, files, memory, skills and apps | One window for many coding agents, each thread on its own git branch |
| Runs Claude Code on | Your own Claude sign-in | Your own Claude sign-in |
| Isolation | A virtual machine per space (Mac and Linux) | A git branch per thread |
| Teams | Shared spaces on TurnPanel Server | Machines linked to an account |
| Phone | Through the browser; the tunnel needs Pro at $20 a month | Mobile apps; T3 Connect links up to 3 machines |
| Open source | Announced under Apache 2.0, not yet public | Yes, MIT |
| Best for | Recurring business workflows and teams | Developers shipping pull requests |
They are not rivals so much as neighbors with different hobbies. The T3 Code page has the other half of this table in full.
Sources: turnpanel.com (home, pricing and open-source pages), its documentation (getting started for Personal and Server, agents, jobs, memory and skills, reaching, security and privacy), and the project's Homebrew tap, all read on November 11, 2026. TurnPanel is made by the team behind echowin. It is not made by Anthropic or by us, it is preview software, and it changes fast. When this page and their docs disagree, their docs win.