Matchlock

lastmod 2026-02-26created 2026-02-261 edits

Protects AI agent workloads with a Linux-based sandbox

About

A CLI-based sandboxed execution environment built to solve the security problem of code execution by AI agents
Uses ephemeral microVMs to boot an isolated Linux environment in under a second, providing full VM-level isolation
A network allowlist feature permits communication only with specified hosts and blocks all other traffic
With secret injection, API keys and credentials are never leaked into the VM
- A MITM proxy on the host injects the real key only at request time
Uses a copy-on-write file system so each sandbox runs independently and leaves no trace when it exits
Supports both Linux (KVM) and macOS (Apple Silicon)
Provides Go and Python SDKs for creating and controlling VMs directly from within an application
- Programmatically runs commands, streams output, writes files, and so on
Network modes differ by platform
- Linux: nftables-based transparent proxy
- macOS: Virtualization.framework NAT or gVisor TCP/IP interception
Built-in image management and build features
- Supports Dockerfile-based builds, OCI image caching, and local image import
MIT license. Go (86%) + Python (12%)

author Zer0 sitemap