ekovshilovsky

Cloister — AI skill for Claude Code

AI community

Run multiple Claude Code accounts & AI agents on one Mac — isolated macOS VMs with secure sandboxing.

How to install Cloister

This entry records only its repository, not the path inside it, so there is no exact command to give. Open ekovshilovsky/cloister and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Cloister does

Run multiple Claude Code accounts & AI agents on one Mac — isolated macOS VMs with secure sandboxing.

Alternatives in AI

Cc Mirror — Create multiple isolated Claude Code variants with custom providers (Z.ai, MiniMax, OpenRouter, LiteLLM) 2.1k ★
macOS Use — Make Mac apps accessible for AI agents 2k ★
Phantom — An AI co-worker with its own computer 1.3k ★

README

Cloister: Isolated VMs for AI Agents & Multi-Account Claude Code on macOS

[![CI](https://github.com/ekovshilovsky/cloister/actions/workflows/ci.yml/badge.svg)](https://github.com/ekovshilovsky/cloister/actions/workflows/ci.yml) [![Release](https://img.shields.io/github/v/release/ekovshilovsky/cloister)](https://github.com/ekovshilovsky/cloister/releases/latest) [![Go Report Card](https://goreportcard.com/badge/github.com/ekovshilovsky/cloister)](https://goreportcard.com/report/github.com/ekovshilovsky/cloister) [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)

Isolated macOS VM environments for running multiple Claude Code organizations, sandboxing autonomous AI agents like [OpenClaw](https://openclaw.ai/), and separating credentials across client engagements.

![cloister demo](demo.gif)

Why cloister?

**Multi-account isolation.** Claude Code stores credentials, conversation history, and project config in `~/.claude`. If you work across multiple organizations, every session shares the same identity. cloister gives each account its own isolated VM with separate credentials, CLAUDE.md, and conversation history.

**Autonomous agent containment.** AI agents like OpenClaw run 24/7 with shell access, browser control, and cron scheduling. cloister's VM isolation is stronger than Docker (separate kernel, not just namespace isolation) — services inside the VM are unreachable from the host unless explicitly tunneled, and `cloister stop` is an instant kill switch.

**Dual-backend architecture.** Colima (Linux VMs) for Claude Code isolation and Docker workloads. Lume (macOS VMs via Apple Virtualization Framework) for OpenClaw and agents needing macOS-native features like iMessage via BlueBubbles.

Architecture

graph TB
    subgraph Host["macOS Host"]
        CLI[cloister CLI]
        Config["~/.cloister/config.yaml"]
        Ollama["Ollama (Metal GPU)"]
        OP["1Password CLI"]

        subgraph Colima["Colima Backend (Linux