
Every MCP server and agent you install can read your SSH keys and .env files. Anthropic open-sourced the sandbox it built for Claude Code to stop that. Wrap any agent, MCP server or command in it, and it can only touch the folders and websites you allow. Everything else gets blocked. On Mac, you get an alert when something tries. npm install -g @anthropic-ai/sandbox-runtime Mac and Linux. 6.3K stars. https://t.co/Aw2jicuVd1