# Agent Safehouse

macOS-native sandboxing for local agents. Move fast, break nothing.

Source: https://wheredoirunthis.com/products/agent-safehouse · JSON: https://wheredoirunthis.com/api/products/agent-safehouse · Read on 2026-10-12

## At a glance

- Type: Sandbox
- Kind: Open source tool
- Isolation: Not disclosed
- Free tier: Not documented
- Starting price: Not disclosed
- GPU: Not documented
- Regions: Not disclosed
- Coverage: 3 of 61 assessed capabilities supported
- Agent readiness: read 5 of 10 signals, drive 2 of 4 signals

## Links

- Homepage: https://agent-safehouse.dev/
- Docs: https://agent-safehouse.dev/docs/
- Repository: https://github.com/eugene1g/agent-safehouse

## Runtime

- **GPU & accelerators**: Optional --enable=gpu permits local Metal shader compilation and GPU IOKit access; operator supplies hardware. [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md)
- **BYOC (Bring your own cloud)**: na [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md)
- **Secrets management**: Sanitized environment by default; --env=FILE and --env-pass selectively inject credentials into the process. Keychain and cloud credential access opt in. [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md)
- **Storage options**: Native selected workdir and explicit read/write or read-only host path grants; default workdir is the exact invocation directory in current main docs. [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md)
- **Supported workloads**: native macOS coding-agent CLI sessions, native desktop/app-hosted agents, local builds and developer commands, local browser workflows with explicit policy grants [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/overview.md)
- **Persistence**: Allowed host filesystem files persist; Safehouse does not allocate an isolated disk. [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md)
- **Data jurisdiction**: na [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md)
- **Resource limits & quotas**: Not documented — "No managed CPU/RAM/runtime quotas disclosed; local hardware/OS limits apply." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) (confidence: medium)
- **SDK languages**: Not documented — "No official SDK; native Bash CLI." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) (confidence: medium)
- **Network & egress controls**: Open inbound/outbound TCP/UDP by default; blocking exfiltration/C2 is explicitly not a goal. [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/profiles/20-network.sb)
- **Snapshots & forks**: No — "No runtime/filesystem snapshot or fork primitive documented; process forking is not sandbox instance cloning." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) (confidence: medium)
- **Deployment methods**: cli [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md)
- **Isolation**: Not disclosed — "Known primitive: macOS Seatbelt via sandbox-exec on native HOST PROCESSES sharing the host kernel. Not a VM, microVM, container, or separate OS. unknown means this known primitive is unmapped by the frozen enum." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| AI app builder | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Autonomous QA agent | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Built-in coding agent | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| BYOK for LLMs | Partially supported | "safekeys() { safe --env-pass=OPENAI_API_KEY,ANTHROPIC_API_KEY,GEMINI_API_KEY "$@"; }" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/getting-started.md) |
| Credential-injection proxy | Not supported | "`--env` \| Pass the full inherited host env to the wrapped command, including secrets (incompatible with `--env-pass`)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| LLM gateway | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| MCP client | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| MCP-server hosting | Partially supported | "Network access by default for registries, APIs, remotes, and MCP servers." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/overview.md) |
| MCP server | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Model inference API (first-party) | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Preinstalled coding agent | Not supported | "Install with Homebrew or download the single shell script, then run your agent inside it." [source](https://agent-safehouse.dev/) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Custom domains | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Direct public IPv6 | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Edge KV store | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Egress controls | Not supported | "Threat-model note: blocking exfiltration/C2 is explicitly NOT a goal for this sandbox." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/profiles/20-network.sb) |
| Email send / receive | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Public preview URLs | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Private networking | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Built-in reverse proxy | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| BYOC | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Deploy into customers' VPCs | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Secrets management | Partially supported | "`--env=FILE` \| Start from sanitized env and source extra values from `FILE`" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| Self-host / OSS core | Supported | "Agent Safehouse uses `sandbox-exec` with composable policy profiles and a deny-first model." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Sharing | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| SSO / SAML | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Teams | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Workload identity | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Command args provided: generate policy, then execute command under `sandbox-exec`." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| E2B-compatible API | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Filesystem API | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Git deploy | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| HTTP data API | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| OpenAPI spec | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Private container registry | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Public API | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| SDK | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| SSH access | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Desktop / computer-use sandbox | Not applicable | "Safehouse is not a VM replacement. It is a low-friction host-level containment layer for local agent workflows on macOS." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| GPU compute | Partially supported | "Use it for GPU/Metal-only workloads; `electron` and `chromium-headless` pull it in transitively." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| Live-state (memory) snapshots | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Multi-region | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Object storage | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Persistent disk | Supported | "Main directory to grant read/write" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| Sandbox templates / custom images | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Scale to zero | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Selectable isolation runtime | Not supported | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Snapshots / forking | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Ephemeral instant DB (no-signup) | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| First-party database | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Vector search | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not applicable | "Safehouse (`sandbox-exec`) \| macOS Seatbelt policy on host processes \| No (shared host kernel)" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/isolation-models.md) |
| Built-in observability | Partially supported | "`--explain` \| Print effective workdir/grants/profile-selection summary to stderr" [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md) |
| Preview environments | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Scheduled tasks | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Project template marketplace | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |
| Durable workflows | Not supported | "No first-party capability found in the homepage, README, options, usage, policy architecture, repository tree or documentation index; wrapping a separately installed program does not make its capabilities first-party Safehouse features." [source](https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/README.md) |

## Agent readiness

### Read: 5 of 10 signals present

5/10 signals (3 full, 2 partial)

- Llms txt: fail — "https://agent-safehouse.dev/llms.txt and /docs/llms.txt: HTTP 404; llm-instructions.txt is a policy-generation prompt, not an llms.txt index."
- Llms full txt: fail — "https://agent-safehouse.dev/llms-full.txt: HTTP 404."
- Robots AI policy: partial — "https://agent-safehouse.dev/robots.txt: content-signal definitions only; no explicit AI user-agent allow/block rules and no Sitemap pointer."
- JSON LD: fail — "https://agent-safehouse.dev/: no application/ld+json script in retained homepage HTML."
- Sitemap: fail — "https://agent-safehouse.dev/sitemap.xml: HTTP 404; robots.txt has no alternate Sitemap pointer."
- Meta quality: pass — "https://agent-safehouse.dev/: descriptive title, description, OG and Twitter metadata in retained HTML."
- Markdown negotiation: fail — "https://agent-safehouse.dev/: Accept text/markdown initially returned Cloudflare 403 error 1010; foxcrawl retry served text/html, not negotiated Markdown. /index.md and /docs/getting-started.md returned 404. GitHub raw Markdown docs remain available."
- Content efficiency: pass — "https://agent-safehouse.dev/: 4373 readable text bytes / 36351 HTML bytes = 12.03%, after excluding scripts/styles."
- Docs discoverable: pass — "https://agent-safehouse.dev/: server-rendered main navigation links Docs at /docs/."
- Pricing machine readable: na — "Self-host-only Apache-2.0 local tool; no hosted pricing tier applies."
- Anti bot: partial — "https://agent-safehouse.dev/: ordinary HTML/docs fetches succeeded; Accept text/markdown got Cloudflare signature-ban 403. Browser retry succeeded with HTTP 200, blocked:false."

### Drive: 2 of 4 signals present

2/4 signals (1 full, 1 partial)

- Public API: na — "Local command wrapper, no hosted API endpoint."
- Openapi spec: na — "No HTTP API to describe; /openapi.json HTTP 404 and docs/tree contain no linked spec."
- MCP server: fail — "/.well-known/mcp HTTP 404; no first-party MCP control server in docs/tree. Wrapping agents that use MCP is not a Safehouse MCP server."
- SDK packages: fail — "Shell CLI only; no official client SDK packages documented."
- Auth docs: na — "No hosted API account/key authentication; local file/credential access is policy, not service auth."
- Agent self serve creds: na — "No Safehouse service credentials or account required for local execution."
- Webhooks: na — "Local wrapper has no hosted event/webhook service."
- CLI tool: pass — "https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/docs/docs/options.md: official safehouse CLI, full options and execution documentation."
- Error model: na — "No JSON/HTTP API error model; local policy/command errors only."
- Rate limit docs: na — "No hosted endpoint rate limits; resource usage belongs to local machine."
- Agent config: partial — "https://raw.githubusercontent.com/eugene1g/agent-safehouse/main/AGENTS.md: repository LLM quick reference; /agents.md and /.well-known/agent HTTP 404. llm-instructions.txt is an LLM policy-building prompt, not an installable agent skill."

## Coding harnesses

- Claude Code (Anthropic) — "Tested against all leading agents: Claude Code" [source](https://agent-safehouse.dev/)
- Codex CLI (OpenAI) — "Tested against all leading agents: Codex" [source](https://agent-safehouse.dev/)
- OpenCode (opencode) — "Tested against all leading agents: OpenCode" [source](https://agent-safehouse.dev/)
- Amp (Sourcegraph) — "Tested against all leading agents: Amp" [source](https://agent-safehouse.dev/)
- GitHub Copilot (GitHub) — "Tested against all leading agents: Copilot CLI" [source](https://agent-safehouse.dev/)
- Gemini CLI (Google) — "Tested against all leading agents: Gemini CLI" [source](https://agent-safehouse.dev/)
- Aider (Aider) — "Tested against all leading agents: Aider" [source](https://agent-safehouse.dev/)
- Goose (Block) — "Tested against all leading agents: Goose" [source](https://agent-safehouse.dev/)
- Pi (earendil-works) — "Tested against all leading agents: Pi" [source](https://agent-safehouse.dev/)
- Cursor (Anysphere) — "Tested against all leading agents: Cursor Agent" [source](https://agent-safehouse.dev/)
- Cline (Cline) — "Tested against all leading agents: Cline" [source](https://agent-safehouse.dev/)
- Kilo Code (Kilo) — "Tested against all leading agents: Kilo Code" [source](https://agent-safehouse.dev/)
- Droid (Factory) — "Tested against all leading agents: Droid" [source](https://agent-safehouse.dev/)

## Open source

- Repository: https://github.com/eugene1g/agent-safehouse
- License: Apache-2.0
- Stars: 2104
- Forks: 99
- Self-host methods: package-manager, other
- Self-host dependencies: macos, bash, sandbox-exec

## Company & presence

- GitHub: https://github.com/eugene1g/agent-safehouse
- Docs: https://agent-safehouse.dev/docs/
- Policy Builder: https://agent-safehouse.dev/policy-builder.html

## Nearby in the atlas

- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)
- [AWS Lambda MicroVMs](/products/lambda-microvms.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.