trailofbits/coop
Isolated VM environment for running Claude Code and Codex
What it solves
It provides a secure, isolated environment for running AI coding agents like Claude Code, Codex, and Grok Build. This prevents these agents from having unrestricted or risky access to your host machine while still allowing them to use essential tools like Docker, git, and compilers.
How it works
coop is a Rust-based CLI that manages disposable virtual machines (VMs). It creates isolated, reproducible environments where agents can operate. Users can configure shared dotfiles via guest_files and automate tool installation using a post_create command.
Who it’s for
Developers who use AI coding agents and want to ensure their host system remains secure and isolated from the agent's actions.
Highlights
- Disposable VMs: Environments are cheap to create and destroy, ensuring a clean state.
- Tool Access: Agents maintain full access to compilers, package managers, and Docker within the VM.
- Cross-Platform: Supported on Linux x86_64 and macOS arm64 (Apple Silicon).
- Customizable: Supports custom configuration for dotfiles and guest tool installation.
Related
- Dispatch
- Project
- Project
- Project
- Project