ClaudeCage

English | 简体中文

[](https://github.com/PACHAKUTlQ/ClaudeCage/actions/workflows/build_and_release.yml)

**Run the SOTA AI coding agent in a portable, secure sandbox.**

[Claude Code](https://github.com/anthropics/claude-code) is a state-of-the-art AI coding assistant. Unfortunately, its CLI is distributed as closed-source and obfuscated javascript. You don't know what it's doing. Is it reading your SSH keys? Is it indexing your photos? Is it planning some Skynet world domination from your `~/Downloads` folder?

Probably not... **but why risk it?**

**ClaudeCage** solves this by packaging the Claude Code CLI into a fully isolated, single-file container. It cannot access any part of your system except for the single project directory you are currently working in.

**Breaking change:** the build output is now named **`claude`** (plus **`claude.rcfg`**), so it can act as a **drop-in replacement** for the original `claude` CLI (but sandboxed).

Features

• Secure Sandbox: Powered by Linux namespaces, the claude process is heavily restricted and cannot access your home directory, network information, or other processes.
• Single-File Portability: The entire environment—the claude binary, the bun runtime, and all dependencies—is packed into a single executable file. Download it, make it executable, and run it.
• No Host Dependencies: You do not need node, bun, or anything else installed on your system.
• Works on Most Linux Distros: Runs on virtually any modern Linux distribution.
• Better Performance: Runs at native speed. It runs even faster than official Claude Code thanks to the modern high performance javascript runtime: [bun](https://github.com/oven-sh