Trail of Bits' Coop runs Claude Code and Codex in isolated VMs
Coop – Isolated VM Environments for Running Claude Code and Codex
Trail of Bits has released Coop, an open-source tool that runs AI coding agents like Claude Code and Codex inside isolated virtual machines. Coop gives each agent its own VM with a snapshot of your codebase, so experiments and risky operations can't touch your host system. It supports both local and cloud VMs, offers a CLI and VS Code/Zed integration via SSH, and includes a review workflow for auditing agent changes.
- compiotr
How is this different from docker sbx or microsandbox.dev? Not saying we don't need more alternatives, just asking to see if there is a reason to switch.
- 3stacks
Oh awesome, I just started building something like this but nice to use something off the shelf for once.
I used a project called toolgate to autoapprove "safe" tool calls but request permission on riskier calls declaratively. But there's so many unnecessary tool permission requests
- darkamaul
I use coop daily and found it super convenient for my use case (ie letting agents go on with no access to my other projects or personal files)
I would recommend anyone that has desire to provide stricter boundaries to agents to give it a try - while remembering that a motivated agent would probably be able to escape it :)