The filesystem for agents
⚠️ Warning: This software is ALPHA; use only for development, testing, and experimentation. We are working to make it production-ready, but do not use it for critical data until it is ready.
AgentFS is a filesystem designed specifically for AI agents. Just as traditional filesystems provide file and directory abstractions for applications, AgentFS provides the storage abstractions that AI agents need.
At the heart of AgentFS is the agent filesystem - a complete SQLite-based storage system for agents implemented using Turso. It combines three essential components: a POSIX-like virtual filesystem for files and directories, a key-value store for agent state and context, and an audit trail tool for debugging and analysis. Everything an agent does - every file it creates, every piece of state it stores, every tool it invokes - lives in a single SQLite database file.
AgentFS provides four main components:
- CLI - Command-line interface for managing agents
- SDK - TypeScript and Rust libraries for programmatic access
- Sandbox - Linux-compatible execution environment
- Specification - SQLite-based filesystem architecture
Initialize an agent filesystem:
Run a program in the sandbox with the agent filesystem mounted at /agent:
Inspect the agent filesystem from outside:
Read the User Manual for complete documentation.
Install the SDK in your project:
Use it in your agent code:
See the SDK documentation in MANUAL.md and examples for more details.
Auditability: Every file operation, tool call, and state change is recorded in SQLite. Query your agent's complete history with SQL to debug issues, analyze behavior, or meet compliance requirements.
Reproducibility: Snapshot an agent's state at any point with cp agent.db snapshot.db. Restore it later to reproduce exact execution states, test what-if scenarios, or roll back mistakes.
Portability: The entire agent runtime—files, state, history —is stored in a single SQLite file. Move it between machines, check it into version control, or deploy it to any system where Turso runs.
Simplicity: No configuration files, no database servers, no distributed systems. Just a single file and a simple API.
Sandboxing: Run agents in an isolated Linux environment where filesystem access is controlled and monitored. Perfect for testing untrusted code or enforcing security policies.
- User Manual - Complete guide to using the AgentFS CLI and SDK
- Agent Filesystem Specification - Technical specification of the SQLite schema
- SDK Examples - Working code examples
- Turso database - an in-process SQL database, compatible with SQLite.
MIT
.png)

