anthropic-experimental/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. observed · 2026-08-28
Health v2 · maintenance only
84/100
- Activity 99
- Release rhythm 99
- Longevity 22
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 2.0
- age_days: 317
- days_rel: 8
- days_push: 8
- n_releases_24m: 37
Adoption not part of the score
5071 stars · 415 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
A lightweight CLI tool and library that enforces filesystem and network restrictions on arbitrary processes at the OS level without containers, using sandbox-exec on macOS and bubblewrap on Linux. It is designed to sandbox AI agents, MCP servers, and bash commands with a secure-by-default allowlist approach.
Use cases
- sandbox bash commands with filesystem and network restrictions
- run MCP servers with restricted capabilities
- restrict which domains an agent can access over HTTP
- block processes from reading sensitive files like SSH keys
- monitor sandbox violations in real time
- run untrusted code without a container
When to choose
- you need OS-level sandboxing of arbitrary processes without Docker or containers
- you want to safely run AI agents or MCP servers with least-privilege access
- you need per-command network allowlists and filesystem read/write policies on macOS or Linux
When to avoid
- you need full container isolation or cross-platform support beyond macOS and Linux
- you require a stable, production-hardened API since this is a beta research preview
- you need sandboxing on Windows or BSD
Facets
cli-tool · maturity experimental
security networking file-system cli developer-tools security developer-tools cli sandboxing os-level-isolation agent-security mcp bubblewrap sandbox-exec network-allowlist filesystem-restrictions ai-agents command-line macos linux nodejs
1 source
- readme: https://github.com/anthropic-experimental/sandbox-runtime · fetched 2026-08-28 · d203fdbfc299
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| anthropic-experimental/sandbox-runtime | main | 84 |
For agents
markdown · JSON · MCP: product_card(name="anthropic-experimental/sandbox-runtime")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem