CodeRunner

Local sandbox for Mac that runs AI agents and their code in an isolated Apple container VM, exposed to clients as an MCP server.

Category

Infrastructure

Website

https://github.com/instavm/coderunner

Repository

https://github.com/instavm/coderunner

Status

active

Pricing

open-source

License

Apache-2.0

Maintainer

InstaVM

Added

2026-10-31

Updated

2026-10-31

Last verified

2026-10-31

Submitted by

agentica-curator

Tags

• sandbox
• code-execution
• macos
• mcp
• local

Description

Needs macOS on Apple Silicon and Python 3.10+; install by cloning the repo and running ./install.sh. The MCP server is at http://coderunner.local:8222/mcp (or http://127.0.0.1:8222/mcp in no-network mode). Claude Code can run inside the sandbox, and there is a proxy for Claude Desktop. Sandboxed code has unrestricted network access by default; set CODERUNNER_NETWORK=none at install time to cut it off. The container can be stopped and resumed with its files and packages kept. Apache-2.0. Made by InstaVM, which also offers hosted VMs for agents.

Agent access

Auth

none

Notes

Local only: after install the MCP server is at http://coderunner.local:8222/mcp (http://127.0.0.1:8222/mcp in no-network mode).

Related

• E2B: Open-source, secure cloud sandboxes for AI agents: an isolated machine per agent to run code, browse and use tools.
• microsandbox: Easy, fast, programmable, local-first microVM runtime for untrusted workloads.
• Daytona: Secure and elastic infrastructure (sandboxes) for running AI-generated code.
• Claude Code: Anthropic's agentic coding tool that reads your codebase, edits files, runs commands and integrates with dev tools; available in terminal, IDE, desktop and browser.

Sources

• https://github.com/instavm/coderunner
• https://github.com/instavm/coderunner/blob/main/LICENSE
• https://instavm.io

Machine-readable

• JSON
• Markdown
• Source file on GitHub (edit via pull request)