Running commands in isolated environments?

[mikegehard]

Is there any plan to support running commands in an isolated environment for added security?

Running generated code and/or running terminal commands can open up the host machine to security problems.

I’ve started to use dev containers to help mitigate that. Is there any plan to support that in this mcp server?

[wonderwhy-er]

Its not immediate feature but having option to restrict MCP to work inside of disposable container for security is something that is on my radar.

What kind of dev containers are you using?

[nbanks]

Personally, for Linux, I set up an "ai" user on my machine and then added myself to the :ai group. I'd be curious about how to run this in a container, though I suspect there's a fancy docker command you could use to do it if node is installed inside the container.
In my ~/.config/Claude/claude_desktop_config.json I have

  "mcpServers": {
    "desktop-commander": {
      "command": "/usr/bin/sudo",
      "args": [
        "-u", "ai", "node",
        "/path/to/DesktopCommanderMCP/dist/index.js"
      ]
    },

And in sudoers I added:
myuser ALL = (ai) NOPASSWD: /usr/bin/node

[mikegehard]

I've been using devcontainers: https://github.com/mikegehard/devcontainers-for-isolation

I wrote up some thoughts here about the why: https://github.com/mikegehard/ai-assisted-agile-development/blob/main/playbooks/ai-generated-code-execution.md

[Lukars]

Hey Mike. Id love to try your setup! Can you give me detailled instructions on how to set up the Desktop Commander MCP inside a dev container and hook it up with the Claude app on the host machine?

[karthik0899]

Does file commander supports wsl2 in windows

[wonderwhy-er]

I seen people use it.
But I am not much of a user myself(am on Mac atm) and in my tests on windows machine I have were so so.
But I will ask in Discord to see how people who do use it use it

[karthik0899]

Thanks

[AmrElsayyad]

This project looks promising, but unfortunately it doesn't yet support Linux and Windows.

https://github.com/trycua/cua