LangBot Deployment Guide

What it does

When your agent uses it

• Installing LangBot with Docker Compose for self-hosting
• Deploying LangBot to Kubernetes
• Securing the Box and plugin runtime control connections
• Setting the global API key or editing config.yaml

Example prompts

• “Deploy LangBot with Docker Compose using the box profile and tell me which ports it opens.”
• “Set up a shared control token for the Box runtime before I expose it.”
• “Turn the Box sandbox off in my LangBot config and explain what stops working.”
• “Enable the global API key in config.yaml for my internal MCP clients.”

Requirements

• Docker and Docker Compose, or a Kubernetes cluster
• `openssl` for generating control tokens

What it can do on your machine

Read from SKILL.md and the folder at commit de886ed. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Shell commands in SKILL.md call:

  • docker
  • openssl
  • git

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  Links to these hosts (documentation or services it may open):

  • langbot.app

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names these keys or tokens, usually read from environment variables:

  • LANGBOT_BOX_CONTROL_TOKEN
  • LANGBOT_PLUGIN_RUNTIME_CONTROL_TOKEN

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

LangBot Deployment Guide loads about 1.2k tokens when it runs. Until then it costs about 114 tokens; SKILL.md has 495 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~114

When it runs · the whole SKILL.md, loaded when a task matches

~1.2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteRuns commands with sudoSKILL.md:99

  `sudo usermod -aG docker <user>` and restart in a new shell.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from langbot-app/LangBot at commit de886ed, republished under its Apache-2.0 licence (© langbot-app). 495 words, ~1,217 tokens.

name

langbot-deploy

description

Deploy and configure a LangBot instance — Docker / Docker Compose, Kubernetes, the config.yaml model, the Box sandbox runtime, the plugin runtime, and the global API key. Use when installing, deploying, upgrading, or configuring LangBot in production or self-hosted environments. Triggers on "deploy langbot", "langbot docker", "langbot compose", "langbot kubernetes", "langbot config.yaml", "langbot box runtime", "langbot global api key".

git clone https://github.com/langbot-app/LangBot
cd LangBot/docker

# Full stack (sandbox/Box + stdio MCP hosting + skill add/edit enabled)
docker compose --profile all up

# Basic (no Box runtime)
docker compose up

# data/config.yaml
api:
    port: 5300
    global_api_key: 'a-strong-secret'   # empty disables it

© langbot-app, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/skills/langbot-deploy of langbot-app/LangBot.

Open the folder on GitHubat commit de886ed