Back to Apps

Containarium
by footprintai
Self-hostable agent runtime with SSH-native isolation, eBPF egress policy, and MCP-native CLI.
253 stars
Updated 1 month ago
Works in:Cursor
Exposes:ToolsResources
What it does
Containarium provides a persistent, isolated Linux runtime for AI agents. Instead of running tools on a local machine, agents get their own SSH-reachable boxes with kernel-level network isolation, allowing them to install software, manage services, and deploy apps safely.
Tools
shell_exec: Run shell commands and capture output.read_file/write_file: Atomic file operations within the container.list_directory/move_file/delete_file: Filesystem management.create_container/delete_container: Platform-level container lifecycle management.expose_port: Map container ports to public hostnames via the Sentinel proxy.
Installation
Add to claude_desktop_config.json:
{
"mcpServers": {
"containarium-box": {
"command": "ssh",
"args": ["alice", "agent-box"]
}
}
}
Supported hosts
Confirmed support for Claude Code, Cursor, and OpenCode via SSH-native MCP transport.
Quick install
curl -fsSL https://raw.githubusercontent.com/footprintai/containarium/main/hacks/install.sh | sudo bashInformation
- Pricing
- free
- Published
- 7/10/2026
- Updated
- 1 month ago
- stars
- 253
Categories
Choose your AI client and follow the steps below.
Cursor
mcp.json entry: {"mcpServers": {"containarium-box": {"command": "ssh", "args": ["alice", "agent-box"]}}}Claude Desktop
{
"mcpServers": {
"containarium-box": {
"command": "ssh",
"args": ["alice", "agent-box"]
}
}
}





