Sandbox Runtime

Active
GitHub TypeScript Apache-2.0

Description

An experimental lightweight isolated runtime from Anthropic for executing agent tasks in a sandboxed environment.

Key Features

  • OS-level sandboxing without containers using native primitives (sandbox-exec on macOS, bubblewrap on Linux)
  • Filesystem isolation with deny-then-allow read patterns and allow-only write patterns
  • Network isolation via HTTP and SOCKS5 proxy-based domain filtering with allowlists/denylists
  • Dual isolation model combining filesystem and network restrictions for effective sandboxing
  • CLI tool (srt) and TypeScript library for wrapping any command with security boundaries
  • Sandbox violation monitoring with real-time alerts on macOS

Use Cases

💡 Sandboxing MCP servers to restrict filesystem and network access in AI agent workflows
💡 Securing AI code execution by limiting file reads/writes and outbound network connections
💡 Protecting sensitive files like SSH keys from being accessed by automated processes
💡 Building safe development environments where agents can run commands with guardrails
💡 Enforcing least-privilege access patterns for local AI agent tool execution

Tags

sandbox runtime code-execution

Categories

🏗️ Sandbox & Execution

Quick Start

Install globally with 'npm install -g @anthropic-ai/sandbox-runtime'. Wrap any command with 'srt <command>' to apply sandbox restrictions. Configure allowed domains and filesystem paths in ~/.srt-settings.json. For MCP servers, add 'srt' as the command prefix in .mcp.json.
Visit GitHub

Related Projects