Mino

Mino

[](https://dean0x.github.io/x/mino/) [](https://opensource.org/licenses/MIT) [](https://www.rust-lang.org) [](https://crates.io/crates/mino) [](https://www.npmjs.com/package/@dean0x/mino) [](https://github.com/dean0x/mino/releases) [](https://github.com/dean0x/mino/actions/workflows/ci.yml)

Secure sandbox wrapper for AI coding agents using rootless Podman containers.

Wraps **any command** in isolated containers with temporary cloud credentials and SSH agent forwarding. Works with Claude Code, Aider, Cursor, or any CLI tool.

Why Mino?

AI coding agents are powerful but require significant system access. Mino provides defense-in-depth:

• Filesystem Isolation: Agent only sees your project directory, not ~/.ssh, ~/.aws, or system files
• Credential Scoping: Short-lived cloud tokens instead of permanent credentials
• Network Boundaries: Four network modes — bridge (default), host, none, or allowlisted egress via iptables — with built-in presets for common services

Features

• Rootless Containers: Podman containers with no root required (OrbStack VM on macOS, native on Linux)
• Temporary Credentials: Generates short-lived AWS/GCP/Azure tokens (1-12 hours)
• SSH Agent Forwarding: Git authentication without exposing private keys
• **Persisten