Deploy a New Agent

Configure and launch a cloud-hosted AI agent.

1 Agent Type
→
2 Runtime
→
3 Configure

Choose Your Agent

Pick a role to get started fast, or build from scratch.

Scroll down for OpenClaw, NemoClaw, or custom Docker options.

Choose Runtime

Select the runtime environment for your agent.

Your agent runs on TamaleBot's native runtime — lightweight containers with full policy engine, audit trail, vault, and integrations built in.

TamaleBot Runtime
Native — from $5/mo
Shell, SSH, Git, cron, file I/O, web fetch, vault, sub-agents
Migrate from OpenClaw
Paste config →
Import provider, model, system prompt, channels, schedules
1. Agent Identity

Lowercase, no spaces. Used in URLs and the dashboard.

Custom domain for webhook endpoints. +$2/mo add-on

This is the system message sent to the LLM on every conversation. Be specific about tone, scope, and boundaries.

Get deploy confirmations and agent status alerts. We won't spam you.

2. AI Model

We use Claude natively. Usage is auto-deducted from your account credits at Anthropic's standard rates.

🧮 Token Cost Estimator

Estimate your monthly LLM token costs. This is separate from TamaleBot hosting — it's what you pay your AI provider (or what gets deducted from credits in managed mode).

101001,000
Estimated monthly LLM cost
~$9.00
~$0.003 per message
~1,500 tokens/msg avg

Based on ~1,500 tokens per message (500 in + 1,000 out). Actual costs vary with conversation length, tool use, and context. Prices reflect current provider rates.

3. Integrations

Select which platforms your agent connects to. All included free — configure credentials in your dashboard after deployment.

GitHub
Respond to PRs, issues, and commits via webhooks
iListens for GitHub webhook events — PR opened, issue commented, push to branch. Your agent reviews code, responds to issues, and triggers deploys. Uses a GitHub Personal Access Token or GitHub App. Included
Telegram
Respond to messages in a Telegram bot
iUses Telegram's Bot API with long polling. No extra server needed — runs inside your agent container at zero additional cost. Included
Discord
Respond to @mentions and DMs via Gateway WebSocket
iConnects via Discord's Gateway WebSocket. Responds to @mentions in servers and all DMs. Completely free — no API costs. Included
WhatsApp
Respond via WhatsApp Cloud API webhooks
iUses Meta's WhatsApp Cloud API with webhooks. 1,000 free service conversations/month. Costs are billed by Meta, not TamaleBot. Included
Slack
Respond in Slack channels and DMs
iConnects via Slack's Socket Mode (WebSocket). No public endpoint or extra infrastructure required. Runs inside your agent container. Included
Email (SMTP)
Send and receive emails
iSends via your SMTP server (Gmail, SES, etc). No extra infrastructure — your agent connects directly to your mail provider. Included
LINE
Respond via LINE Messaging API webhooks — tokens + webhook URL configured on the Agent page after deploy
iUses LINE's Messaging API with HTTPS webhooks. Create a channel at developers.line.biz, copy the channel access token + secret, then paste them + the auto-generated webhook URL from your agent's Integrations tab. Included
Matrix
Respond in Matrix rooms (any homeserver)
iConnects to any Matrix homeserver via the Client-Server API. Works with matrix.org, Synapse, Element, etc. Included
Microsoft Teams
Respond via Azure Bot Framework
iRegister a bot in Azure Bot Service, add the Teams channel, and set the messaging endpoint. Uses App ID + App Password. Included
Feishu / Lark
Respond via Feishu / Lark event subscriptions
iCreate a custom app at open.feishu.cn or open.larksuite.com, enable Messenger + event subscriptions, copy App ID + Secret. Included
Mattermost
Respond via Mattermost outgoing webhooks
iCreate a bot account + outgoing webhook in your Mattermost team. Point the webhook URL at your agent and paste the bot token here. Included
Webhooks
Trigger agent via HTTP POST, receive callbacks
iYour agent gets a unique HTTPS endpoint. Send a POST request to trigger it, or configure outbound webhooks to notify other services. Included
HubSpot CRM
Manage contacts, deals, and pipeline
iCreate and search contacts, manage deals and pipeline stages. Uses HubSpot CRM API v3 with a Private App access token. Setup guide → Included
Stripe
Track charges, customers, and subscriptions
iList charges, customers, and subscriptions via Stripe API. Uses your Secret Key (sk_live_ or sk_test_). Setup guide → Included
Shopify
Manage products, orders, and customers
iList and manage products, orders, and customers via Shopify Admin API. Uses a Custom App access token. Included
Notion
Query databases, create and update pages
iSearch, query databases, create pages, and append content via Notion API. Uses an internal integration token. Included
Voice / Phone
Inbound and outbound phone calls via Twilio
iVoice calls powered by Twilio. Your agent answers inbound calls, makes outbound calls, and handles IVR flows. $5/mo base + Twilio per-minute charges billed separately. Coming soon. +$5/mo · Soon
iMessage
Send and receive iMessages (requires Mac relay)
iiMessage requires macOS hardware — it can't run in Linux containers. We maintain a shared Mac relay fleet. Coming in a future update. Coming Soon
4. Creative & Social Media

Your agent can generate images, create videos, and publish to social platforms. Add API keys in your dashboard after deployment.

🎨 Image Generation
Nano Banana (Google) · GPT Image (OpenAI) · DALL-E
🎬 Video Generation
Sora (OpenAI) · text-to-video prompts
📱 Social Publishing
Instagram · TikTok · YouTube · Facebook · Threads · X
🔗 SaaS Integrations
Shopify · Stripe · HubSpot · Notion (configure in Integrations above)
Connect to X (Twitter)
X Simple Connect Recommended
Connect your X account with one click. No developer account needed. TamaleBot handles OAuth, token refresh, and rate limits.
Use Your Own API Keys Free
Have a Twitter developer account? Enter your own keys for full control.

All credentials are AES-256 encrypted at rest. Configure API keys and tokens in your agent dashboard after deployment.

Content Publishing
Posts are saved as drafts for your review before publishing.
Schedule times will be converted to UTC cron expressions.
Comma-separated domains the agent can browse. Blueprint defaults are always included. Wildcards supported (e.g. *.example.com).
5. Tools & Permissions

What can this agent do? All actions are policy-checked and audit-logged.

Shell Commands
Run terminal commands in the agent container
iExecute bash commands inside a hardened Docker container. All commands pass through the security policy engine before running. Included
File Read / Write
Read and write files in the agent workspace
iRead and write files within the agent's isolated workspace directory. Sensitive paths (SSH keys, credentials) are blocked by the policy engine. Included
Web Browsing (fetch)
Fetch URLs and extract text content
iLightweight HTTP fetch — retrieves pages and extracts text. Good for APIs and static content. No JavaScript rendering. Included
Full Browser (Chromium)
Headless Chrome for JS-rendered pages, screenshots, form fill
iRuns a headless Chromium instance alongside your agent for JS-rendered pages, screenshots, form filling, and browser automation. Coming to Cloudflare Containers. +$3/mo · Soon
Sub-Agents per agent
Let this agent spawn helper sub-agents on demand for task delegation
iEnables sub-agent delegation for this specific agent. Your agent can spawn ephemeral helpers when it decides to break up a task — the sub-agents inherit this agent's config, complete their assigned task, and die when done. Also enables messaging sibling agents and shared team storage.

Note: This is different from Team Deploy (the "Deploy Team" card on step 1). Team Deploy creates multiple permanent agents working together as peers. Sub-Agents is one agent with the ability to spawn temporary helpers.

Safety limit: Max 5 concurrent sub-agents per parent agent at any one time. If the agent is mid-flight on 5 tasks and tries to spawn a 6th, it gets an error and waits for one to complete. Protects against runaway delegation loops.

Billing: Flat $5/mo add-on billed by deploy time (Vultr-style) — charged from the moment you enable it until you destroy the agent or turn it off, regardless of how many sub-agents the agent actually spawns. Meter stops when the agent is destroyed.
Consensus Mode
Multiple perspectives debate and fact-check before answering
iYour agent spawns 3 parallel perspectives (analytical, critical, creative) that independently answer each question, then a coordinator synthesizes the strongest response. Reduces hallucinations and improves answer quality. Runs in-process — no extra containers. Uses ~3× your normal LLM token cost per message, so it's only available in BYOK mode where you control your own provider spend. Free (3× tokens)
⚙️
Configure more in your dashboard
After deployment, your agent dashboard lets you configure: scheduled tasks (cron jobs), security policies, resource limits, access controls, API keys & credentials, skills marketplace, SaaS integrations (Shopify, Stripe, HubSpot, Notion), widget embedding, and more. Everything on this page can be changed later too.

Estimated Monthly Cost

Cloud Agent (base) $5.00
Total $5.00 /mo
Billed daily (~$0.17/day). Destroy anytime.

Deploys to Cloudflare Containers. Your agent gets its own isolated VM.

Your API key is billed directly by your LLM provider — TamaleBot never touches it. Using managed mode? We handle the API calls for you with a small service fee on top of provider rates.

🔒

Your API Keys Are Never Exposed

TamaleBot uses network-layer credential injection to keep your API keys safe. Your agent never sees the real key — not in environment variables, not in memory, not in logs. Here's how it works:

🔐
Injected at the Network Layer
When your agent calls an API (Anthropic, OpenAI, Stripe, etc.), credentials are injected into the HTTP request after it leaves the container — at the infrastructure level. The agent code only sees a placeholder.
🛡
Encrypted at Rest
All credentials are AES-256 encrypted before storage. Decryption keys are derived per-agent — even our infrastructure can't read one agent's keys from another.
🌐
Network Policy Enforcement
Each agent has a strict allowlist of domains it can reach. If your agent only uses Anthropic and Telegram, those are the only hosts it can contact. No data exfiltration possible.
🗃
Isolated Containers
Every agent runs in its own isolated container with a non-root user. No shared memory, no shared filesystem, no cross-agent access. Your agent is yours alone.

BYOK (Bring Your Own Key)? Your LLM provider bills you directly. TamaleBot never proxies, stores, or logs your API calls. The key is injected into the authorization header at the network layer and immediately discarded — it exists in memory for the duration of a single HTTP request.