There are 3 main problems with running Claude on your laptop: Every accidental file read puts your personal data into a 3rd party server, every workspace cleanup risks deleting more than intended, every package Claude installs may contain malware. You risk untrusted and irrelevant files going into your context window, which may contain hidden instructions to hijack your agent and can bloat your context window and wastes tokens and attention. You cannot easily see or control who Claude talks to and what sources/packages it can use. The solution is to run Claude in a sandbox built for coding agents. We build droneship to solve this problem. We are doing a soft launch today with a generous free tier for you to get started and try it out. Most other sandboxes require time consuming setup, configuration, and require you to leave api keys in the sandbox. With Droneship you can install and get running in less than a minute, and it feels as convenient as running locally. It is similar to Claude Cloud sandboxes but with the following additional features that Claude’s Cloud sandboxes do not support: Port forwarding: Test the agent’s dev servers, runbooks, and apis in your local. Only you can open the tunnel. SSH shell: Debug, run tests, read scratch files and watch the agent live. Per-tool MCP control: Disabled tools never reach the agent, so it has less context bloat, makes better tool calls, and cannot make risky tool calls. Logs of blocked egress: See every host that your agent tried to reach, this is the number one indicator of compromise. Easy live allowlisting: Allow a wrongly blocked host in one click, with no restart and no lost session. Persistent workspace: Your code, tools, config and conversations stay for the next run. Spend for each sandbox: See cost, tokens and compute time in the console, with no setup. No agent lock-in: Claude Code and Codex now, with more agents soon. submitted by /u/JAlbrethsen
Originally posted by u/JAlbrethsen on r/ClaudeCode