MonkeyCode console
- CPU
- 2 cores
- Memory
- 4 GB
- Storage
- 40 GB
Independent research site. Not the official MonkeyCode website.
SELF-HOSTING FIELD GUIDE · SOURCE-CHECKED 2026-07-10
The software can run inside a private network. The real work is defining environment isolation, model routes, credentials, observability, upgrades, and ownership.
Published starting floor
The project distinguishes the management console from the hosts that run development environments. Treat these numbers as minimums for evaluation, not a production capacity promise.
Published by the upstream project; checked 2026-07-10. Add headroom for concurrency, builds, image caches, repositories, logs, and retained artifacts.
Trust-boundary map
Map each arrow before installation. This is where most privacy assumptions become testable architecture questions.
Readiness checklist
If an owner cannot answer these questions, the deployment is still an experiment—and should be treated like one.
How are filesystems, processes, CPU, memory, storage, and network access separated per task?
Which code and prompts leave the network, to which provider, under what retention terms?
What can each token read, write, branch, review, and trigger—and how is it rotated?
Who owns runtimes, certificates, package mirrors, patches, signing, and vulnerability scans?
Which platform and task signals are logged, who can read them, and could they contain code or secrets?
When are environments, repositories, logs, prompts, artifacts, and backups removed?
How will new releases be staged, tested, backed up, and reversed without losing task state?
How does AGPL-3.0 apply to intended use, modifications, and network access?
Capacity model
A single heavy build can matter more than dozens of idle accounts. Measure the resource profile of representative tasks before setting concurrency.
Track environment startup time, CPU and memory peaks, disk growth, image pulls, repository size, build duration, artifact retention, and cleanup success.
Safe rollout
The first objective is not scale. It is discovering the operational and security assumptions that public documentation cannot answer for your environment.
Use a limited repository set, narrow tokens, approved models, and low concurrency.
Run builds and tests that exercise real dependencies, internal services, and preview behavior.
Expire a token, stop a host, fill a disk, interrupt a model request, and test cleanup.
Prove backup restoration and one staged version change before inviting a wider team.
Self-hosting answers