Anthropic's Claude Code Sandbox
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Anthropic has published sandbox-runtime (srt), the OS-level sandbox behind Claude Code, as an Apache-2.0 npm package. It restricts filesystem and network access for arbitrary processes without a container, using Seatbelt on macOS, bubblewrap on Linux and an alpha Windows backend. Features include allow-only network policy and credential masking, and MCP servers can be wrapped by swapping the command to srt. The repo calls it a research preview with evolving APIs, and the Windows build cannot support Schannel-based tools. The claims come from the README and were not independently verified.