Hacker News Reader

What do you mean by sandboxing bash? Isn’t this about just having a tool like curl or Postman?

Implanting an MCP client in your agent code isn’t all that different from calling requests or whatever

I mean the ability to have an agent run commands in a Bash shell without allowing them access to any file or environment variable visible to the user on that computer, and without allowing them uncontrolled internet access.

Program specific permissions (separate from the user operating them) are part of the Linux permissioning system already right? That doesn’t seem like an issue to me.

I guess the main problem would be finding an API client that can easily plug into your harness, with a nice UI for turning specific APIs on and off.

Reply on news.ycombinator.com