Anthropic open-sources the OS-level sandbox sandbox-runtime: providing container-free file and network isolation for AI agents.
On October 24, 2026, Anthropic open-sourced sandbox-runtime (srt), an OS-level sandboxing tool that operates without containers, designed to restrict file read/write and network access permissions for AI agents, MCP servers, and CLI tools. It supports macOS (Seatbelt), Linux (bubblewrap), and Windows (alpha), with npm package version 0.0.81 under the Apache-2.0 license.
Why it matters：This tool represents a significant advancement in AI security infrastructure—achieving fine-grained, full-process-tree coverage through the operating system’s native isolation mechanisms, directly addressing the risks of prompt injection and privilege escalation, and has already been deployed for internal validation within Claude Code.