Run Dex inside your network.

A Private Runner is a Mac, Linux machine, container, or Kubernetes cluster you own. It connects out to Deixic, so you open no inbound ports, and work that has to start inside your network runs there under the same approval policy.
Your machineA Mac, a Linux machine, a container, or a Kubernetes pod
ActivityTake overResume DexDetachOutbound connectionThe runner connects out to Deixic with short-lived credentials
Private RunnerDex runs the long job here
Runs where you choose
A Mac, a Linux machine, a Docker container, or a Kubernetes pod.
Same approval policy
Tool calls on a runner follow the same policy as hosted work, and each action leaves a receipt.
Your sign-in stays with you
Runners get short-lived credentials, and your own sign-in never lands on the machine.
Keeps going without you
Long jobs keep running after every client disconnects.
Take over any time
Watch the activity, the editor, or the desktop, take control, and hand it back to Dex.
From a machine you own to Dex at work on it
Shared by every surface.
Use it with Dex on every surface, alongside company context that existing agents read over MCP.