Etiqueta: sandbox

OpenAI's coding agent that runs locally, written in Rust: reads and writes code and runs commands inside an OS-level sandbox. Sign in with a ChatGPT plan or use an API key.

JavaScript, TypeScript and WebAssembly runtime with built-in formatting, linting, testing and compilation. Scripts get no file, network or environment access unless granted with --allow-* flags, making agent-generated scripts safer to run.

Runs commands and scripts in a sandbox, indexes large tool outputs for full-text search and returns only results to the context window to save tokens; after compaction it can retrieve edits and task state. Supports Claude Code, Codex and more. Needs Node.js 22.5+.

Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed.

Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.

From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental.

From Dagger: gives every coding agent an isolated container and Git branch so several agents can work in parallel, and you can view command logs, take over the terminal or discard results anytime. Needs Docker and Git locally; still experimental.

Docker's official MCP gateway (the docker mcp CLI plugin): runs servers from the Docker MCP Catalog in isolated containers, manages secrets, OAuth and tool toggles centrally, and gives multiple clients one endpoint. Built into Docker Desktop 4.59+; Docker CE and other setups must build the plugin.

Official Docker skills: containerize projects, optimize and harden Dockerfile builds, orchestrate with Compose, use Docker Sandboxes and Docker Agent, with confirmation guardrails before deletes and other destructive actions.