This tool acts as a robust Model Context Protocol (MCP) server, offering a highly secure and isolated Docker container for executing bash commands. Designed specifically for AI agents, it ensures zero host access through a 7-layer defense mechanism, including network isolation, capability dropping, resource limits, and a comprehensive command blocklist. It features session persistence within a dedicated workspace, a full JSONL audit trail for all tool calls, and exposes a suite of MCP tools for command execution, file management, and logging, making it an ideal backend for safe, AI-powered shell interactions.
主要功能
01Persistent Workspace for files within a session
02MCP Tools for bash execution and file management
037-Layer Security Model for complete isolation
04Full JSONL Audit Trail of all tool calls
050 GitHub stars
06Extensive Command Blocklist and Path Confinement
