# Lowkey ## Docs - [Claude Code: Anthropic's native coding CLI on Bedrock](https://docs.lowkey.run/agents/claude-code.md): Run Anthropic's Claude Code on AWS via Amazon Bedrock with no API keys, automatic updates, and full tool permissions pre-approved out of the box. - [Codex CLI: run OpenAI's coding agent on your AWS EC2](https://docs.lowkey.run/agents/codex-cli.md): Deploy OpenAI's Codex CLI as a full builder agent on AWS. Connects to OpenAI's API directly — not Bedrock. Authenticate with codex login after deploy. - [Hermes: lightweight NousResearch CLI agent on Bedrock](https://docs.lowkey.run/agents/hermes.md): Deploy NousResearch's Hermes CLI on AWS via Amazon Bedrock. No API keys required, lighter than OpenClaw, and features a built-in self-improving skills loop. - [Kiro CLI: deploy AWS's agentic IDE on your EC2 instance](https://docs.lowkey.run/agents/kiro-cli.md): Deploy Kiro CLI on AWS with five AWS MCP servers pre-installed. Authenticate via browser SSO or store your API key in Secrets Manager for headless operation. - [NemoClaw: sandboxed OpenClaw with Bedrock inference](https://docs.lowkey.run/agents/nemoclaw.md): Run OpenClaw inside NVIDIA's OpenShell sandbox on AWS. Landlock, seccomp, and network namespace isolation block all AWS API calls except Bedrock InvokeModel. - [OpenClaw: persistent AI agent with gateway and memory](https://docs.lowkey.run/agents/openclaw.md): Deploy OpenClaw on AWS for a 24/7 AI agent with a systemd gateway, persistent memory, and Telegram, Discord, and Slack integrations backed by Amazon Bedrock. - [Agent packs: compare all available Lowkey AI agents](https://docs.lowkey.run/agents/overview.md): Lowkey agent packs let you deploy a different AI coding runtime with one flag. Compare OpenClaw, Claude Code, Codex CLI, Kiro, and more by provider and auth. - [Essential bootstraps to run on every new Lowkey agent](https://docs.lowkey.run/bootstraps/essential.md): Run essential bootstraps right after your first session. They reduce mistakes, set the correct AI models, and configure the tools your agent relies on. - [Optional bootstraps: extend Lowkey with extra features](https://docs.lowkey.run/bootstraps/optional.md): Optional bootstraps add workflow-specific features to Lowkey. Run them after essential bootstraps, picking only the ones that match how you work. - [Bootstraps: configure your Lowkey agent after deploy](https://docs.lowkey.run/bootstraps/overview.md): Bootstraps are prompt-based configuration instructions you paste into your agent chat to teach it how to behave on your Lowkey install. - [Connect Lowkey to Telegram for chat access anywhere](https://docs.lowkey.run/bootstraps/telegram.md): Telegram integration lets you interact with your Lowkey agent from any device. Two bootstraps cover direct messages and multi-agent group chats. - [Core concepts: packs, profiles, and deploy methods](https://docs.lowkey.run/concepts.md): The four concepts that control every Lowkey deployment: pack, profile, install mode, and deploy method — and how they combine into a working agent. - [Lowkey: self-hosted AI coding agents on your AWS account](https://docs.lowkey.run/introduction.md): Lowkey deploys persistent AI coding agents to your AWS account. Your code, your infrastructure, your data — all in one install command. - [Account assistant profile: read-only access on AWS](https://docs.lowkey.run/profiles/account-assistant.md): The account_assistant profile gives your agent ReadOnlyAccess plus limited writes for tags and logs — safe for cost analysis, audits, and review. - [Builder profile: AdministratorAccess for your agent](https://docs.lowkey.run/profiles/builder.md): The builder profile gives your agent AdministratorAccess so it can create, modify, and delete any AWS resource. Always deploy in a sandbox account. - [Choosing the right Lowkey permission profile for AWS](https://docs.lowkey.run/profiles/overview.md): Profiles set how much AWS access your agent has — from full admin down to Bedrock-only inference. Pick the right one before you deploy. - [Personal assistant profile: Bedrock-only inference](https://docs.lowkey.run/profiles/personal-assistant.md): The personal_assistant profile limits your agent to Amazon Bedrock inference only — no AWS API access, no security services, minimal cost footprint. - [Get started with Lowkey: deploy an agent in ~10 minutes](https://docs.lowkey.run/quickstart.md): Install Lowkey on AWS with a single curl command. Choose your agent pack, permission profile, and deploy method — then connect via SSM. - [Lowkey installer CLI reference: all flags and usage](https://docs.lowkey.run/reference/cli.md): Every flag accepted by the Lowkey installer, canonical non-interactive invocation examples per agent pack, environment variables honored, and exit codes. - [Deploy Lowkey using AWS CloudFormation (default method)](https://docs.lowkey.run/reference/cloudformation.md): How the Lowkey CloudFormation template works, all key parameters, stack lifecycle commands, and how to find your EC2 instance after deploy. - [Lowkey environment variables: installer and runtime](https://docs.lowkey.run/reference/environment-variables.md): Shell variables that control the Lowkey installer, plus the runtime variables set on your EC2 instance for each agent pack after deploy completes. - [Store and use API secrets with AWS Secrets Manager](https://docs.lowkey.run/reference/secrets-manager.md): How Lowkey uses Secrets Manager to keep API keys out of deploy state — step-by-step Kiro headless setup and patterns for Codex, Anthropic, and LiteLLM keys. - [AWS security services that Lowkey enables by default](https://docs.lowkey.run/reference/security-services.md): What each of the five AWS security services does, why Lowkey enables them for builder and account_assistant profiles, approximate costs, and how to opt out. - [Lowkey simple mode defaults and auto-configurations](https://docs.lowkey.run/reference/simple-mode-defaults.md): Everything Lowkey decides automatically when you pick a pack and profile in simple mode — instance size, security services, volumes, VPC, IAM, and models. - [Telemetry & Privacy](https://docs.lowkey.run/reference/telemetry-privacy.md): What the Lowkey installer sends, why, and how to turn it off. - [Telemetry Schema](https://docs.lowkey.run/reference/telemetry-schema.md): Full wire-level contract for Lowkey install telemetry — event envelopes, field types, retention, and backend reference. - [Deploy Lowkey using Terraform: variables and workflow](https://docs.lowkey.run/reference/terraform.md): How to use Terraform as your Lowkey deploy method — all input variables, state management with S3 backend, outputs, and teardown instructions. ## OpenAPI Specs - [openapi](https://docs.lowkey.run/api-reference/openapi.json) ## Optional - [GitHub](https://github.com/inceptionstack/lowkey) - [Releases](https://github.com/inceptionstack/lowkey/releases)