Anthropic open-sources sandbox-runtime to stop MCP servers reading your SSH keys and .env files
solyarisoftware · x · 2026-10-27
Anthropic open-sourced sandbox-runtime, the sandbox it built for Claude Code. Any MCP server or agent you install can read your SSH keys and .env files by default; wrapping them in this tool restricts processes to only the folders and websites you allow, enforced at the OS level without containers.
- Works on Mac and Linux; macOS shows an alert when something tries to overstep
- Install: npm install -g @anthropic-ai/sandbox-runtime
- Already at 6.3K stars on GitHub
More from coding & agent
- CEO says he hasn't opened Feishu for a week—Agents handle approvals, messages and email — FuSheng_0306 · 2026-10-27
- Harden your machine against npm supply-chain worms with 3 config lines and an agent prompt — kesarito · 2026-10-27
- Anthropic engineer: build self-prompting agent systems, not single prompts — _AustinCalvert_ · 2026-10-27
- Cronjob that says "continue" every 45 minutes keeps your agent working — _AustinCalvert_ · 2026-10-27
- Ant Group's Lingguang 2.0 relaunches as a proactive personal AI assistant — xiaohu · 2026-10-27
- Three open-source models sketch a desk-scale local agent loop: brain, voice, and eyes — lmoroney · 2026-10-27