sandbox plugins

by Mert Koseoğlu

MCP server that saves 98% of your context window with session continuity. Sandboxed code execution in 11 languages, FTS5 knowledge base with BM25 ranking, and automatic state restore across compactions.

by Marco D'Alia

Drive AgentBox from Codex on the host: create isolated sandboxes for coding agents, run them in parallel, queue background jobs, and push commits safely through the host relay.

by arbiterForge

Locally-hosted Codespace equivalent for codeArbiter. Pulls an untrusted repo into an ephemeral, isolated Docker container with no host-filesystem access and configurable egress, caches dependencies by content hash, then tears the box down. Requires Docker and nixpacks on PATH.

by elb-pr

Configurable MCP wrapper that consolidates your tools into just 3, using semantic search for on-demand discovery and sandboxed TypeScript execution. Ships with 7 example servers (96 tools) - reduces context consumption by 97% (48k tokens down to 1.1k).

by Daytona

Creates and manages isolated cloud sandboxes (secure code execution environments with dedicated runtimes) on the Daytona platform

by Scott Converse

Context window optimization for Claude Code / Cowork. Sandboxes tool output, compresses what returns with a self-learning 3-stage pipeline, and routes tools automatically — reducing context consumption by 30–60% in typical sessions, more in research-heavy ones.

by Pioneer contributors

Delegate Pi code reviews with native sandboxing on macOS and Linux.

by Kourosh Mobl

Pool several AI subscriptions inside Claude Code by delegating to vendor CLIs as subprocesses. Ships field-tested adapters for GLM (Z.AI), Codex (ChatGPT), Copilot, Antigravity (Gemini), Ollama (local) OpenRouter (metered, many vendors behind one key) and a second Claude subscription, a multi-model consultation panel, task delegation into throwaway worktrees you review as a diff, and a probe-driven generator that builds and verifies an adapter for any provider you already have.

Locked-down Docker sandbox (read-only git, no package installs) plus cost-aware multi-agent routing via OpenRouter/xAI profiles. Human owns git checkpoints on the host.