KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#typescript #ai-agents #cli #claude-code #codex #developer-tools #dsh-plugin #ai-agent #mcp #deepseek-harness #windows #open-source

bouvet

★ 102 Open GitHub ↗

Sandbox for Agents

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<h1 align="center">Bouvet</h1>

Isolated code execution sandboxes for AI agents

<a href="#what-is-bouvet">About</a> •
 <a href="#how-it-works">How It Works</a> •
 <a href="#mcp-tools">MCP Tools</a> •
 <a href="#documentation">Documentation</a>

---

## What is Bouvet?

Bouvet (boo-veh) is an MCP server that creates secure, isolated sandboxes for AI agents to execute code.

When an AI agent needs to run Python, Node.js, or shell commands, Bouvet spins up a lightweight microVM in ~200ms. The code runs in complete isolation separate kernel filesystem and network then the sandbox is destroyed. Nothing persists, nothing leaks.

**The problem it solves:** AI agents need a safe place to run untrusted code. Docker isn't enough containers share the host kernel. Bouvet uses [Firecracker](https://firecracker-microvm.github.io/) microVMs for true hardware-level isolation the same technology that powers AWS Lambda.

**Who it's for:** Developers building AI agents with Claude, Cursor, or any MCP-compatible client who need secure code execution without managing infrastructure.

---

## How It Works

```
┌─────────────┐     ┌─────────────┐     ┌─────────────────────────┐
│  AI Agent   │────▶│ bouvet-mcp  │────▶│  Firecracker microVM    │
│  (Claude)   │     │ (MCP Server)│     │  ┌─────────────────┐    │
└─────────────┘     └─────────────┘     │  │  bouvet-agent   │    │
                                        │  │  (guest daemon) │    │
                                        │  └─────────────────┘    │
                                        └─────────────────────────┘
```

1. AI agent requests a sandbox via MCP
2. Bouvet boots a microVM with your chosen toolchain
3. Agent executes code, reads/writes files
4. Sandbox is destroyed when done

Each microVM has ~256MB RAM, 1 vCPU, and a full Linux environment with Python, Node.js, and common dev tools pre-installed.

---

## Features

- **True Isolation** — Each sandbox is a separate VM, not a container
- **Fast Startup** — Warm pool enables sub-200ms sandbox creation
- **Multi-Language** — Python, Node.js, Rust, Bash, and shell access
- **MCP Native** — Works with Claude, Cursor, and any MCP client

---

## MCP Tools

| Tool              | Description                          |
| ----------------- | ------------------------------------ |
| `create_sandbox`  | Create a new isolated sandbox        |
| `destroy_sandbox` | Destroy a sandbox and free resources |
| `list_sandboxes`  | List all active sandboxes            |
| `execute_code`    | Run Python, Node.js, or Bash code    |
| `run_command`     | Execute shell commands               |
| `read_file`       | Read file contents from sandbox      |
| `write_file`      | Write file contents to sandbox       |
| `list_directory`  | List directory contents              |

---

## Documentation

| Document                                | Description                              |
| --------------------------------------- | ---------------------------------------- |
| [Self-Hosting Guide](docs/SELF_HOST.md) | Deploy Bouvet on your own infrastructure |
| [Configuration](docs/CONFIG.md)         | Environment variables and options        |
| [Architecture](docs/ARCHITECTURE.md)    | Technical deep dive                      |

---

## Testimonials

<table>
<tr>
<td width="50%" valign="top">
 
"Bouvet provides a stable, no-nonsense interface for managing isolated execution environments that works exactly as you'd expect. It handles basic file operations and code execution reliably, making it a utilitarian choice for tasks requiring simple, ephemeral sandboxes."
— Gemini 3 Pro
</td>
<td width="50%" valign="top">
 
"The sandbox spins up in seconds and just works—no configuration headaches, no surprises. It's not flashy, but it does exactly what it promises without getting in your way."
— Claude 4.5 Opus
</td>
</tr>
</table>

---

## Behind the name: Bouvet (boo-veh)

Everything began with a single, uncompromising promise: absolute isolation. In an ecosystem where code execution is often messy, shared, and persistent, we wanted to create a void a perfect, ephemeral vacuum where software could live for a moment and then disappear without a trace.

This pursuit of solitude brought us to <a href="https://en.wikipedia.org/wiki/Bouvet_Island">Bouvet Island</a>, it is one of the most remote places on Earth uninhabited, untouched, and thousands of miles from civilization. It is the physical embodiment of what we've built in software: a harsh, beautiful, and completely isolated environment where nothing comes in, and nothing leaves.

---

## License

MIT — See [LICENSE](LICENSE) for details.

---

Built with 🧨 Firecracker and 🦀 Rust

bouvet

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README