Skip to main content
A coding agent with sandbox tools that run directly on your machine — no Docker required. Since there’s no container isolation, exec security defaults to approval-always and file operations use path_restriction to confine access to the workspace directory.

Create local sandbox tools

Define the agent

Security model

Symlink traversal is blocked when path_restriction is set, preventing the agent from escaping the workspace via symlinks.

Comparison with Docker sandbox

Run it

Every shell command the agent tries to run will pause and ask for your approval in the terminal. File write/edit operations also require approval. Read-only operations run freely within the workspace. Open http://localhost:5173 to view your agents and workflows, run them from the UI, and see execution traces. Python example on GitHub | TypeScript example on GitHub