Anthropic Open-Sources sandbox-runtime: Providing a Containerless OS-Level Sandbox for AI Agents
Anthropic has open-sourced sandbox-runtime (srt), which uses OS-level isolation to restrict the files and network hosts that processes can access, without the need to start containers. The npm package @anthropic-ai/sandbox-runtime v0.0.81 is licensed under Apache-2.0 and requires Node.js 22.12+. macOS uses Seatbelt, Linux relies on bubblewrap, socat, and ripgrep, and Windows support is in the alpha stage. Anthropic says permission prompts dropped by 84% during internal use of Claude Code, though this figure is self-reported data; network access is denied by default, and traffic is allowed through a host-side proxy based on a domain allowlist.
Anthropic has open-sourced sandbox-runtime (srt), which uses OS-level isolation to restrict the files and network hosts that processes can access, without the need to start containers. The npm package @anthropic-ai/sandbox-runtime v0.0.81 is licensed under Apache-2.0 and requires Node.js 22.12+. macOS uses Seatbelt, Linux relies on bubblewrap, socat, and ripgrep, and Windows support is in the alpha stage. Anthropic says permission prompts dropped by 84% during internal use of Claude Code, though
Matched fieldsBody

