Locking any MCP server in a Claude Code sandbox with srt
11/01/2026 — 11/01, 09:16·1 sources (all)·1 reports (all)
Key takeaways
- A tutorial uses Anthropic's Sandbox Runtime (srt) to wrap any MCP server process in OS-level file and network restrictions—sandbox-exec on m…
- only allowlisted domains can connect. srt is built for Claude Code.
Background & analysis
On November 1, 2026, DEV Community's AI section published a tutorial showing how to wrap any MCP server process inside Anthropic's Sandbox Runtime (srt), enforcing OS-level file and network limits without a container.
The guide explains that an MCP server is a program handed to an agent to run locally under the user's permissions, and notes that a buggy or compromised one could read SSH keys or reach out to arbitrary hosts. It describes srt as relying on sandbox-exec on macOS and bubblewrap on Linux, with proxy-based network controls layered on top. The default policy blocks network access entirely and forbids writes outside the working directory; the examples show that only domains placed on an allowlist can connect, while all other requests are intercepted by the network allowlist. The tutorial adds that srt is built for Claude Code, is currently a beta research preview, and that its configuration format may change.
AI-generated from 1 reports · updated 9 hours ago
Related AI tools
- Heat index
- 77
- All sources
- 1
- All reports
- 1
- First seen
- 9 hours ago
Reports on this story headlines open the original
This guide uses Anthropic's Sandbox Runtime (srt) to wrap any MCP server process in OS-level file and network limits — sandbox-exec on macOS, bubblewrap on Linux — without a container. Defaults deny network access and writes outside the working paths; in the walkthrough only allowlisted hosts get through, with other calls blocked by the network allowlist. srt was built for Claude Code and is a beta research preview, so config formats may change.
DEV Community · AIAI score 67
Other stories people are talking about
- Heat index 77Claude Code drives Blender scenes through MCP1 sources
- Heat index 56AI coding sessions from Claude Code and others store API keys in plaintext1 sources
- Heat index 27Open-source mydash lets users view Claude Code and Codex outputs on mobile1 sources
- Heat index 92NewClaude Code 2.1.316 adds subagent effort variable1 sources
- Heat index 40Developer uses Claude Code to turn playtest feedback into game levels1 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion