Run Windows for AI.
Signed-in Windows desktops that start in a third of a second, for agents that use real apps.
$5 of free credit. No card needed.
import { Panes } from "panes-sdk";
const panes = new Panes();
const machine = await panes.machines.create({ template: "windows" });
const result = await machine.exec("(Get-CimInstance Win32_OperatingSystem).Caption");
console.log(result.stdout);
await machine.delete();from panes import Panes
panes = Panes()
machine = panes.machines.create("windows")
result = machine.exec("(Get-CimInstance Win32_OperatingSystem).Caption")
print(result.stdout)
machine.delete()curl https://api.usepanes.com/v1/machines \
-H "Authorization: Bearer $PANES_API_KEY" \
-H "Content-Type: application/json" \
-d '{"template": "windows"}'Measured on one 12-thread server
- to a running, signed-in desktop
- 0.3 sto a running, signed-in desktop
- for 24 desktops started at once
- 3.2 sfor 24 desktops started at once
- to resume a stopped machine, windows open
- 1.4 sto resume a stopped machine, windows open
- an hour for 2 vCPU and 4 GB, billed by the second
- $0.10an hour for 2 vCPU and 4 GB, billed by the second
Fast, Stateful, Forkable.
Windows Infrastructure for AI Agents.
Signed In, in a Third of a Second
Machines resume a desktop saved in memory: already signed in, apps already loaded. 0.20 to 0.34 s, measured.
Separated and Encrypted
Every machine is its own virtual machine on its own encrypted disk. It reaches the internet, never another machine.
Fork Mid-Task
Copy a running machine, open windows and all, and try two approaches at once.
Programmatic Control.
Commands, Files, Screen and Input.
Run Commands
PowerShell scripts or programs, as SYSTEM or in the signed-in desktop, with timeouts, input and parameters.
Files In and Out
Read and write any path, with writes that land whole or not at all.
Screen and Input
Screenshots as PNG. Clicks, drags, scrolling, key chords and typing.
Watch and Take Over
A link that opens the desktop in any browser for an hour.
const machine = await panes.machines.create({ template: "windows" });
// Files in and out
await machine.files.write("C:/work/tools.zip", zip);
// PowerShell as SYSTEM, or in the signed-in desktop where windows show
await machine.exec("Expand-Archive C:/work/tools.zip C:/tools");
await machine.exec("Start-Process msedge https://example.com", { desktop: true });
// See the screen, then use the mouse and keyboard
const png = await machine.screenshot();
await machine.click(640, 360);
await machine.type("hello from my agent");
await machine.key("ctrl", "s");
const report = await machine.files.readText("C:/work/report.txt");
// A link for a person to watch and take over, for an hour
console.log(await machine.viewer());Computer Use.
A Real Windows Desktop for Agents That Click.
See and Act
Screenshots at the desktop's real size and pixel-exact input, for models that work from the screen.
Desktop Commands
Start programs in the signed-in session, where their windows show, and wait for them to finish.
People in the Loop
Share a viewer link to watch an agent work, step in, then hand control back. Anyone with the link can use the machine for an hour.
More Than a VM.
The State Your Agents Need.
Templates
Install apps and sign in once, then save the machine. Every machine from it starts that way.
Snapshots
Save a running machine's memory and disk, and start new machines from that moment.
Stop and Resume
Stopping keeps every window. Idle machines stop on their own after 15 minutes.
Usage by the Second
Per-machine usage and cost in the dashboard and the API, as it happens.
Built to Run Untrusted Code.
Encrypted, Isolated, Wiped.
A Key per Machine
Disks, saved memory and snapshots are encrypted, each with its own key. Deleting a machine destroys its key; its snapshots and forks keep theirs until you delete them.
Walled Off
Machines reach the internet, never the server they run on, private networks or each other. Nothing can connect in.
A Private Control Line
Commands and files travel over a virtual serial port, not the network, so nothing on the network can reach the agent inside.
Pay by the Second.
Only While Machines Run.
| vCPUper hour | $0.025 |
|---|---|
| Memoryper GB, per hour | $0.0125 |
| Windows machine2 vCPU and 4 GB, per hour | $0.10 |
| Windows machine2 vCPU and 8 GB, per hour | $0.15 |
| Stopped machinesmemory and disk kept | Free |
| People who watch or control desktopsMicrosoft's Remote Desktop license, per person, per month | $10 |
Start with $5 of free credit. That's 50 machine-hours. No card needed.
- Up to 5 machines running at once, 20 kept, 20 snapshots and 2 private templates per organization.
- Machines stop when your credit runs out, keeping their state.
FAQ
What people ask before they start a machine.
What is Panes?
Windows machines for AI agents. Your code starts a machine, runs commands and programs in it, moves files in and out, sees the screen and uses the mouse and keyboard. People can watch and take over in the browser.
How does a machine start in a third of a second?
It doesn't boot. Each template is a Windows desktop that was booted once, signed in and saved with its memory. A new machine resumes that saved moment, sharing the memory it doesn't change with every other machine from the same template.
Which Windows is it?
Windows Server 2025 with the desktop experience, 2 vCPU and 4 GB of memory, with Microsoft Edge and PowerShell. Install anything else yourself, then save the machine as a template so every new machine starts with it.
Can my agents use apps I sign in to?
Yes. Sign in once in a machine, through the browser viewer or by code, and save it as a private template. Machines started from it are already signed in. Private templates are encrypted and only your organization can use them.
What happens when a machine sits idle?
After 15 minutes with no commands, files, screenshots, input or open viewer, it stops and keeps its state, and billing stops with it. Start it again and every window is where it was. Change the time per machine, or turn it off.
How do you keep my data separate?
Each machine is its own virtual machine with its own encrypted disk and key. It can reach the internet but not the server it runs on, private networks or other machines. Deleting a machine destroys its key; its snapshots and forks keep theirs until you delete them.
How does billing work?
You pay for vCPU and memory while a machine runs, by the second. New organizations get $5 of credit, without a card. Stopped machines, snapshots and templates are free for now, within your organization's limits.