Agent Lab
Portable Docker sandboxes that let coding agents run unrestricted, safely
In development
Sheet 21 of 47
Description
Agent Lab lets Codex and Claude Code run in their fully unrestricted modes while Docker confines them to the one project folder you explicitly mount. The dangerous setting becomes the safe setting because the blast radius is the container.
Logins for the agent CLIs, GitHub and Google Cloud live in Docker-only named volumes, so credentials survive between sessions without ever sitting in the sandbox filesystem. One install script sets up a new machine.
Features
- Unrestricted agent modes confined to an explicitly mounted project directory
- Credentials isolated in Docker-only named volumes, never in the sandbox tree
- Single install script; images build on first use
- One command surface across both agent CLIs for logins and MCP servers