anthropic-experimental/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. observed · 2026-10-21
Health v2 · maintenance only
85/100
- Activity 100
- Release rhythm 100
- Longevity 26
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-22. Adoption (stars, forks) is never an input.
- gap_med: 3
- age_days: 367
- days_rel: 2
- days_push: 1
- n_releases_24m: 44
Adoption not part of the score
5614 stars · 499 forks observed · 2026-10-21
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
A lightweight CLI tool and library that enforces filesystem and network restrictions on arbitrary processes at the OS level without containers, using sandbox-exec on macOS and bubblewrap on Linux. It is designed to sandbox AI agents, MCP servers, and bash commands with a secure-by-default allowlist approach.
Use cases
- sandbox bash commands with filesystem and network restrictions
- run MCP servers with restricted capabilities
- restrict which domains an agent can access over HTTP
- block processes from reading sensitive files like SSH keys
- monitor sandbox violations in real time
- run untrusted code without a container
When to choose
- you need OS-level sandboxing of arbitrary processes without Docker or containers
- you want to safely run AI agents or MCP servers with least-privilege access
- you need per-command network allowlists and filesystem read/write policies on macOS or Linux
When to avoid
- you need full container isolation or cross-platform support beyond macOS and Linux
- you require a stable, production-hardened API since this is a beta research preview
- you need sandboxing on Windows or BSD
Facets
cli-tool · maturity experimental
security networking file-system cli developer-tools security developer-tools cli sandboxing os-level-isolation agent-security mcp bubblewrap sandbox-exec network-allowlist filesystem-restrictions ai-agents command-line macos linux nodejs
1 source
- readme: https://github.com/anthropics/sandbox-runtime · fetched 2026-10-21 · d203fdbfc299
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| anthropics/sandbox-runtime | main | 85 |
For agents
markdown · JSON · MCP: product_card(name="anthropics/sandbox-runtime")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem