Coder Agents (self-hosted AI coding agent)

von Coder

AI Application

Niedrige Vertrauensstufe

Coder Agents is a native AI coding agent built into the self-hosted Coder platform. The entire agent loop runs in the customer's Coder control plane: it provisions workspaces on demand, works against models the customer approves (Anthropic, OpenAI, Google, AWS Bedrock or self-hosted endpoints), can be triggered from chat or an API for CI, GitHub Actions, Slack and Jira, and uses centrally managed MCP tools and skills. Controls described by the vendor include model governance, per-user and per-group spend limits, no LLM API keys in workspaces, SSO identity on every action, workspace-template restrictions and usage analytics including pull-request and merge rates. Rated high: an agent that writes and changes code and runs commands in environments with access to source code and cloud credentials is a high-impact system, and its safety rests largely on customer configuration, since Coder's docs say self-hosting alone does not make a deployment compliant. The risk is raised by Coder's own recent incident: on 31 Aug 2026 its module registry (registry.coder.com), which provisions workspaces and installs AI coding agents, served tampered Terraform modules for about 14 hours that stole cloud, CI/CD, SSH, OIDC, AI-provider and MCP credentials (advisory GHSA-vx42-ghc9-gw65, CVSS 9.0); third-party reports say Coder cannot enumerate which deployments pulled them. Coder says it found no indication that customer data it holds was affected, and engaged Coalition Incident Response for an independent review whose summary was due 30 Sept. Because the product is self-hosted, prompts and code go to the LLM providers the customer configures, not to Coder; Coder's trust center lists SOC 2 Type 2 behind an access request but its AI section is a one-line statement with no AI policy, and no published safety or failure-rate data for the agent was found. The rating could be lowered if the independent review, SOC 2 scope and agent guardrails check out and customers mirror or pin the registry.