yada

Reshapr Sbx POC — DevOps skill for Claude Code

DevOps community

Docker Sandboxes (sbx) kit giving a sandboxed agent governed access to APIs via a reShapr MCP server.

How to install Reshapr Sbx POC

This entry records only its repository, not the path inside it, so there is no exact command to give. Open yada/reshapr-sbx-poc and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Reshapr Sbx POC does

Docker Sandboxes (sbx) kit giving a sandboxed agent governed access to APIs via a reShapr MCP server.

Alternatives in DevOps

MCP Boilerplate — A remote Cloudflare MCP server boilerplate with user authentication and Stripe for paid tools 1k ★
Codeg — Aggregate and browse AI coding agent sessions (Claude Code, Codex, Gemini CLI, etc.) in one place 850 ★
MCP SSH Manager — MCP SSH Server: 37 tools for remote SSH management Claude Code & OpenAI Codex DevOps automation, backups, data 460 ★

README

reshapr-sbx-poc

Proof of concept: a **Docker Sandboxes (sbx) kit** that gives a sandboxed coding agent governed access to your APIs through a **[reShapr](https://github.com/reshapr-io/reshapr) MCP server**.

sbx isolates the agent (VM, deny-by-default network, credentials kept on the host).
reShapr turns REST/GraphQL/gRPC APIs into MCP tools, with API-key auth, audit and trimmed responses.
The kit wires the two: it registers the exposition with the agent and lets the sbx proxy inject the reShapr API key, so the key never enters the sandbox.

 ┌──────────── sbx sandbox ─────────────┐        ┌────────────── host ───────────────┐
 │ agent (Claude, Codex, Copilot)       │        │ reShapr server :7777 ──► backend  │
 │  MCP: x-reshapr-key: proxy-managed ──┼─ sbx ──┼─► (checks key, audits, trims)     │
 │  direct backend access: BLOCKED      │ proxy  │ reShapr control plane :5555 + PG  │
 └──────────────────────────────────────┘ injects└───────────────────────────────────┘
                                          real key

Demo backend: the public [Open-Meteo](https://open-meteo.com) weather API (no account needed).

Prerequisites

Docker (Compose v2), `sbx` signed in (`sbx login`), `curl`, and the reShapr CLI (Node 22+): `npm install -g @reshapr/reshapr-cli --allow-scripts=@scarf/scarf` ([docs](https://reshapr.io/docs/tutorials/getting-started)). The global install is optional: if `reshapr` is not on your PATH, the scripts run the same CLI on demand with `npx @reshapr/reshapr-cli@` (pinned to `RESHAPR_RELEASE`). That path needs Node 22+ and is slower on the first run because the CLI is downloaded.

Free ports 5555 and 7777 (3333 with `UI=1`).

Run it

make up       # start reShapr, import Open-Meteo as an MCP server (API key + audit on)
              # make up UI=1 also starts the web UI on http://localhost:3333 (admin / password)
make verify   # create the sandbox with the kit and run the checks
make down     # remov