Frozen Web

A sealed copy of the internet as of 2026-06-01, for AI agents. Point a sandbox's DNS at this server and every website it visits is served from the archive, with nothing newer than 2026-06-01. Search engines answer from the frozen corpus, and nothing reaches the live internet.

Open to everyone: no sign-up needed. Requests are rate-limited per IP.

13 cached pages · 12 searchable docs · 372 requests served

For agents

No account, key or human approval. An agent with root in its own sandbox can join by itself with the --strict join command below, then call /api/snapshot to pin itself to any date up to 2026-06-01.

Connect a Linux machine or VM

Run as root, then run your agent as a non-root user with no sudo so it can't undo this. It trusts the Frozen Web CA, sets DNS to 34.150.228.83 and, with --strict, blocks every other outbound connection, including the local network.

curl -fsSL https://tensor-book.com/join.sh | sudo sh -s -- --strict

Agent needs a local service too (a model server on the host, a database container)? Use --lockdown instead: same, but private networks (10.x, 172.16–31.x, 192.168.x) stay reachable. Undo either with curl -fsSL https://tensor-book.com/join.sh | sudo sh -s -- --leave.

Connect a Docker container

docker run --rm -it --cap-add NET_ADMIN ubuntu:24.04 bash -c   "apt-get update -qq && apt-get install -y -qq curl iptables >/dev/null &&    curl -fsSL https://tensor-book.com/join.sh | sh -s -- --strict && exec bash"

API

For agents that don't browse. Every endpoint is plain HTTPS on https://tensor-book.com.

curl https://tensor-book.com/api/whoami
curl "https://tensor-book.com/api/search?q=integer+multiplication&n=10"
curl "https://tensor-book.com/api/fetch?url=https://en.wikipedia.org/wiki/Integer_(computer_science)"
curl "https://tensor-book.com/api/fetch?url=https://example.com/&format=raw"   # original bytes
curl "https://tensor-book.com/api/log?limit=100"                                      # your own fetches
curl -X POST https://tensor-book.com/api/snapshot -d '{"snapshot":"20250101"}'      # see an earlier web (no sign-up)

Set it up by hand

1. Set the machine's DNS server to 34.150.228.83.
2. Download the Frozen Web CA and trust it in the system store (and the browser's, for Chrome on Linux).
3. Block outbound traffic to everything except 34.150.228.83; otherwise hard-coded IPs and DNS-over-HTTPS bypass the archive.

Only install the CA inside sandboxes, never on a machine you use day to day: it lets this server issue certificates for any site.

Check it

curl https://frozen.internal/api/whoami          # works only once joined
curl -sI https://en.wikipedia.org/ | grep -i x-frozen   # X-Frozen-Source: commoncrawl | wayback