Agent Sandbox Platform

Distributed via GitHub Container Registry (ghcr.io/sumitdalavi/agent-sandbox-platform:v0.2.0) and tagged GitHub Releases with Anchore SPDX 2.3 SBOM and SHA-256 digest attestation.

The Problem

Modern distributed systems and AI agents require robust operational scaffolding. Simple CRUD apps or mock loops fail when subjected to real-world edge cases, asynchronous boundaries, and security constraints.

Related MCP server: AgentMCP

The Solution

An isolated execution platform for AI agents. An agent is given a broken service and a bounded toolset inside a disposable sandbox. Every command passes through policy, risky actions need human approval, results are verified by independent tests, and the whole run leaves a sanitized evidence bundle.

Key Capabilities & Architectural Highlights

• Model Context Protocol (MCP): Server integration for Glama.ai, Smithery.ai, Claude Desktop, and Cursor.

• Non-root Execution: Ephemeral container execution (UID 1000) with ReadonlyRootfs and CapDrop ALL.

• 5-Second Hard Deadline: Guaranteed synchronous container purge on timeout or completion.

• Full OCI Distribution: Published to GitHub Container Registry (GHCR).

💻 Tech Stack

• Container Registry: ghcr.io/sumitdalavi/agent-sandbox-platform:v0.2.0

• Security & Attestation: Anchore SPDX 2.3 SBOM, SHA-256 Checksums

• License: MIT Open Source

📚 Documentation Index

• Architecture Specification — System diagram, component contracts, and container distribution architecture.

• Production Runbook — Operational runbook, live execution commands, and verification recipes.

• Demo Walkthrough — Step-by-step interactive demonstration scenario.

• Changelog — Full version history following Keep a Changelog and SemVer.

🚀 Quickstart & Installation

Option 1: Run with Docker Container (GHCR)

docker pull ghcr.io/sumitdalavi/agent-sandbox-platform:v0.2.0
docker run -d -p 3000:3000 -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/sumitdalavi/agent-sandbox-platform:v0.2.0

Option 2: Run as Model Context Protocol (MCP) Server

Available on Glama.ai and Smithery.ai:

# Smithery one-line install:
npx -y @smithery/cli install SumitDalavi/agent-sandbox-platform --client claude

# Local client spec (.mcp.json):
{
  "mcpServers": {
    "agent-sandbox": {
      "command": "node",
      "args": ["mcp-server.js"]
    }
  }
}

Option 3: Local Developer Setup

# 1. Clone the repository
git clone https://github.com/SumitDalavi/agent-sandbox-platform.git
cd agent-sandbox-platform

# 2. Build and start
make setup
make dev

🎮 Usage & Demo

See docs/DEMO_SCRIPT.md for the interactive walkthrough and verification steps.

Demo (3 minutes)

1. Start "Repair failing checkout service".

2. Watch the agent's actual diagnostic commands stream in.

3. See an unauthorized network request denied by policy.

4. Review the proposed diff and approve export.

5. See independent tests pass and the sandbox torn down.

✅ Verification

Operational Verification

Cryptographic & Supply Chain Verification

To verify the authentic origin, integrity, and software composition of release artifacts:

# 1. Download Release Bundle & Checksums
gh release download v0.2.0 --repo SumitDalavi/agent-sandbox-platform --pattern "*.tar.gz" --pattern "checksums.txt"

# 2. Verify SHA-256 Digest
sha256sum -c checksums.txt

# 3. Inspect SPDX 2.3 Software Bill of Materials
gh release download v0.2.0 --repo SumitDalavi/agent-sandbox-platform --pattern "sbom.spdx.json"
cat sbom.spdx.json | jq .spdxVersion

Capability Status

🔌 Dual-Mode Execution: Live-First with Graceful Mock Fallback

This platform operates in Dual-Mode, dynamically selecting between live container execution and self-contained policy simulation based on environment variables:

👨‍💻 Author

Sumit Dalavi — Senior DevSecOps / Platform Engineer
GitHub | LinkedIn

📄 License

This project is licensed under the MIT License. Copyright (c) 2026 Sumit Dalavi.