Coding agent

Grok Build

Extensible Rust coding agent with plan review, sandbox profiles, and ACP.

Status
Active
License
Apache-2.0 first-party code
Evidence
Documented + code-verifiable, 26 sources
Product record checked
2026-08-07

At a glance

SpaceXAI's open-source terminal coding agent with TUI, headless and ACP surfaces, custom models, MCP, plugins, default-on subagents, plan review, conversation rewind, permissions, and optional OS-level sandbox profiles.

Good choice if

  • Plan-review-execute workflows with explicit diffs and permission controls
  • Terminal, CI, or ACP integrations that need structured output and resumable sessions
  • Extensible setups using MCP, plugins, subagents, custom models, and worktrees

Check before choosing

  • The OS sandbox is off by default; strict/read-only child-network blocking is Linux-only, in-process model and web traffic remains outside that rule, and sensitive paths such as ~/.ssh require explicit deny configuration
  • Worktrees isolate checkouts rather than processes, while always-approve can skip tool prompts unless enterprise requirements explicitly disable bypass mode
  • Cross-session memory is optional and off by default; /rewind now truncates conversation without restoring files, while snapshot-code restoration for a remote resume is opt-in and requires --worktree --restore-code; neither path can undo external side effects
See 3 more considerations
  • Browser review is supplied through plugins or MCP rather than a core browser tool, and web fetch is separately gated
  • The public repository is a periodic monorepo sync, has no public CI workflow, does not accept external contributions, and may not identify the exact source revision used for a shipped binary
  • The statement that Grok 4.5 powers the product is model branding, not evidence of harness quality; no complete independent product benchmark is imported

Capability support

Documented first-class product support, checked against the sources below.

External tools (MCP)
DocumentedProduct-supported MCP integrationSource · checked 2026-07-30The source establishes the mechanism, not its quality or availability in every mode.
Reusable skills
DocumentedProduct-supported reusable skill packagesSource · checked 2026-07-30Support does not establish portability, package quality, safety, or adoption.
Local models
DocumentedLocal or self-hosted model pathSource · checked 2026-07-30The source establishes the mechanism, not its quality or availability in every mode.
Agent parallelism
DocumentedDelegated or parallel agent workflowSource · checked 2026-07-30The source establishes the mechanism, not its quality or availability in every mode.
Runs without an open UI
DocumentedNon-interactive or automation surfaceSource · checked 2026-07-30The source establishes the mechanism, not its quality or availability in every mode.
Browser control
Not documentedNo first-class support established by the current recordAbsence of current documentation is not proof that the capability is impossible.
Isolated execution
OptionalOptional OS sandbox profiles; disabled by defaultSource · checked 2026-07-30Network and filesystem coverage varies by platform and selected profile.
Undo file changes
Depends on surfaceSnapshot-code restoration for remote resumes using --worktree --restore-codeSource · checked 2026-08-07/rewind truncates conversation history without restoring files; snapshot-code restoration is opt-in and cannot reverse external side effects.

Getting started

Install `grok`, sign in with a supported subscription or API key, then choose a permission mode and enable an appropriate sandbox profile.

Open official documentation

Classification and operating model

Category fit and technical mechanisms are evidence records, not product-quality scores.

Category fit
Qualifies, 4/4 criteria
Operating model
7/7 layers documented
Inspect category criteria and operating mechanismsFirst-party records

Why it qualifies as a coding harness

This confirms category fit, not product quality. Every required criterion links back to first-party evidence.

Qualifies4 of 4 required criteria evidenced
  • Adaptive agent loop

    Documented

    The system repeatedly observes results and chooses the next action instead of following a fixed one-pass graph.

  • Repository tool execution

    Documented

    The system can use tools to inspect and change a repository or its execution environment.

  • Task-aware context management

    Documented

    The runtime assembles, updates, compacts, retrieves, or persists task-relevant context while work proceeds.

  • Model-independent runtime control

    Documented

    Permissions, budgets, interruption, policy, or stop controls operate outside the model's own text generation.

Membership establishes category fit only. It does not score quality, safety, autonomy, model capability, or benchmark performance. · Read the membership rule.

How it works under the hood

Seven mechanisms mapped from first-party records. These labels describe what the harness provides, not how intelligent its model is.

7/7layers documented
  • Execution & isolationSandbox availableDocumented mechanism, not a performance score.
  • Tooling & integrationsExtensible toolsDocumented mechanism, not a performance score.
  • Context & statePersistent stateDocumented mechanism, not a performance score.
  • Lifecycle & recoveryCheckpoint/rewindDocumented mechanism, not a performance score.
  • ObservabilityStructured tracesDocumented mechanism, not a performance score.
  • VerificationTool-assistedDocumented mechanism, not a performance score.
  • Governance & permissionsPolicy controlsDocumented mechanism, not a performance score.

Measured and public context

Configuration-specific measurements and source-native activity stay separate from general product capability.

Inspect code audit, measured configurations, and ecosystem signalsContext, not a product score

Public code audit

3/5public artifacts present
Security policy
Present at inspected commit
CI workflow
Not found
Automated tests
Present at inspected commit
Evaluation assets
Not found
Contributor documentation
Present at inspected commit

The 1.0.0 periodic public monorepo sync contains 560 test-like files, implementation guides, and performance benchmarks but no public CI workflow or complete coding-task evaluation suite. External contributions are not accepted, and the sync may not exactly identify the shipped binary source revision.

Inspect commit afbc0fb710320c7add294c2106d447ecc3e3af2e, checked 2026-08-07

Measured configurations

No benchmark run passes the full metadata admission policy for this harness yet. Missing data is not scored as zero.

Benchmark policy and all runs
Context, not quality

Public ecosystem signals

Source-native observations for exact mapped artifacts and reviewed stable release trains. Different units and populations stay separate, and missing coverage is never treated as zero.

View this harness in Usage

Routing, package retrievals, release downloads, editor installs, and repository interest observe different populations. They are never added together and never affect capability evidence, classification, or measured results.

Interpretation rulesSignals checked

First-party evidence

Each capability claim links to the first-party record that supports it.

26 first-party sourcesProduct record checked

Product and interfaces

4 sources
View 3 more sources

Execution and control

4 sources
View 3 more sources

Agents, state and recovery

5 sources
View 4 more sources

Automation and extensions

5 sources
View 4 more sources

Enterprise and operations

4 sources
View 3 more sources

Releases and public code audit

4 sources
View 3 more sources