# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Tagged `sandbox`: 9 items.

- [Codex CLI](https://hebbmind.com/es/cli/openai-codex.md): [CLI] OpenAI's coding agent that runs locally, written in Rust: reads and writes code and runs commands inside an OS-level sandbox. Sign in with a ChatGPT plan or use an API key.
- [Deno](https://hebbmind.com/es/cli/deno.md): [CLI] JavaScript, TypeScript and WebAssembly runtime with built-in formatting, linting, testing and compilation. Scripts get no file, network or environment access unless granted with --allow-* flags, making agent-generated scripts safer to run.
- [Context Mode](https://hebbmind.com/es/mcp/context-mode.md): [MCP] Runs commands and scripts in a sandbox, indexes large tool outputs for full-text search and returns only results to the context window to save tokens; after compaction it can retrieve edits and task state. Supports Claude Code, Codex and more. Needs Node.js 22.5+.
- [Context Mode](https://hebbmind.com/es/plugin/context-mode.md): [Plugin] Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/es/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [Container Use](https://hebbmind.com/es/cli/container-use.md): [CLI] From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental.
- [Container Use](https://hebbmind.com/es/mcp/container-use.md): [MCP] From Dagger: gives every coding agent an isolated container and Git branch so several agents can work in parallel, and you can view command logs, take over the terminal or discard results anytime. Needs Docker and Git locally; still experimental.
- [Docker MCP Gateway](https://hebbmind.com/es/mcp/mcp-gateway.md): [MCP] Docker's official MCP gateway (the docker mcp CLI plugin): runs servers from the Docker MCP Catalog in isolated containers, manages secrets, OAuth and tool toggles centrally, and gives multiple clients one endpoint. Built into Docker Desktop 4.59+; Docker CE and other setups must build the plugin.
- [Docker Skills](https://hebbmind.com/es/skill/docker-skills.md): [Skill] Official Docker skills: containerize projects, optimize and harden Dockerfile builds, orchestrate with Compose, use Docker Sandboxes and Docker Agent, with confirmation guardrails before deletes and other destructive actions.