brood-box

github.com/stacklok/brood-box AI Coding Tools Open-source projectOpen source

brood-box runs coding agents inside hardware-isolated micro virtual machines through a command-line tool.

github.com/stacklok/brood-box
brood-box homepage screenshot

About brood-box

brood-box is a command-line tool that runs coding agents such as Claude Code, Codex, and OpenCode inside lightweight microVMs. It is built on libkrun and uses KVM on Linux or Hypervisor.framework on macOS. The tool creates a copy-on-write snapshot of the current workspace, so the agent works on a copy. It forwards only the secrets the user specifies. When the session ends, the user can review a per-file diff and accept or reject each change before it is written back to the workspace.

The project is marked experimental. Its APIs, CLI flags, config format, and behavior may change without notice between releases. Prerequisites are Linux with accessible /dev/kvm or macOS on Apple Silicon, plus an API key for the chosen agent. The source is open source and the repository includes a LICENSE file. Pricing is unknown.

Key features

  • Runs coding agents in KVM- or Hypervisor.framework-backed microVMs via libkrun
  • Copy-on-write workspace snapshot with interactive per-file review and unified diffs
  • Supports Claude Code, Codex, and OpenCode, plus custom agents through config
  • Three DNS-aware egress firewall profiles: permissive, standard, and locked
  • Discovers and proxies ToolHive MCP servers into the VM
  • Forwards tokens and SSH agent for git operations inside the VM
Best for: Developers who want to run coding agents in a separate VM on a Linux or Apple Silicon machine and review changes before they reach their workspace.
Good for
  • Each session is ephemeral, and the source states nothing lingers after cleanup.
  • In snapshot mode, the agent does not write to real files until changes are accepted.
  • Open source, with the project license included in the repository.
Watch out for
  • The project is explicitly experimental, and APIs, CLI flags, and behavior may change without notice.
  • Requires Linux with KVM access or macOS with Apple Silicon; building from source requires Go 1.26+.
  • Direct workspace mode skips snapshot isolation, review, and undo, so the agent writes directly to the workspace.

brood-box at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Open source
Yes · Source code
Language
English
Last checked
Oct 6, 2026 · Online when checked
Listed
Oct 5, 2026

brood-box alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in AI Coding Tools

Well-known listings from the same topic.

All 176

brood-box FAQ

Which platforms are supported?
Linux with KVM support, where /dev/kvm is accessible, or macOS with Hypervisor.framework on Apple Silicon.
What happens to the agent's changes when a session ends?
The tool shows a per-file diff review. Accepted changes are flushed back to the workspace.
Is an API key required?
Yes. The tool requires an API key for the chosen agent, such as ANTHROPIC_API_KEY for Claude Code.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing