Have Claude Code build an agent sandbox that injects credentials through a sidecar
He wanted a container sandbox for agents, so the harness runs on an internal-only network while a sidecar container injects credentials as a proxy. Claude Code built it quickly, with HTTPS and SSH working.
Source
smashed on Hacker News · 2026-10-22
Written in our own words. Credit to the original author. Link checked 2026-10-23.
What they did
He wanted a container sandbox for agents, so the harness runs on an internal-only network while a sidecar container injects credentials as a proxy. Claude Code built it quickly, with HTTPS and SSH working.
Result (as claimed)
Agents get network access without ever holding the secrets.
Tools they used
Cost: Claude Code: from $17/mo.
Set it up
Pick a contained repo or task
Start on a branch or side project where mistakes are cheap.
Install and configure
Set up Claude Code, Docker. Read what it can run on your machine and limit permissions where possible.
Run it on a real task
Give it a well-scoped issue and let it work. Review the diff like any pull request.
Add guardrails
Keep tests and CI in the loop, and never let an agent push to main or touch production secrets unattended.
Copy the full setup prompt
Paste into your agent and it will walk you through the setup, asking before anything that sends, posts or spends.
You are helping me set up this AI use case end to end in Claude Code. Goal: Have Claude Code build an agent sandbox that injects credentials through a sidecar What the original author did: He wanted a container sandbox for agents, so the harness runs on an internal-only network while a sidecar container injects credentials as a proxy. Claude Code built it quickly, with HTTPS and SSH working. Reported result (as claimed by the author): Agents get network access without ever holding the secrets. Source: https://news.ycombinator.com/item?id=50201688 Tools they used: Claude Code, Docker Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Codex. Goal: Have Claude Code build an agent sandbox that injects credentials through a sidecar What the original author did: He wanted a container sandbox for agents, so the harness runs on an internal-only network while a sidecar container injects credentials as a proxy. Claude Code built it quickly, with HTTPS and SSH working. Reported result (as claimed by the author): Agents get network access without ever holding the secrets. Source: https://news.ycombinator.com/item?id=50201688 Tools they used: Claude Code, Docker Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Grok Bot. Goal: Have Claude Code build an agent sandbox that injects credentials through a sidecar What the original author did: He wanted a container sandbox for agents, so the harness runs on an internal-only network while a sidecar container injects credentials as a proxy. Claude Code built it quickly, with HTTPS and SSH working. Reported result (as claimed by the author): Agents get network access without ever holding the secrets. Source: https://news.ycombinator.com/item?id=50201688 Tools they used: Claude Code, Docker Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
The Daily 5
Get five new use cases tomorrow morning
Free. Real sources. Unsubscribe any time.
Guides for this use case
How to run AI coding agents in a sandbox · How to vibe code an app with Claude Code · How to share passwords and logins with an AI agent safely · How to control coding agents from your phone
Related use cases
Self-host an agent that builds mini apps from chat and edits its own UI
mobius from mobius-os is a self-hosted personal AI system: you chat with a coding agent through Claude Code or Codex and it builds mini apps on your server and modifies its own UI.
Run Claude Code and VS Code on an iPad with a Linux layer
LinPad OS brings Linux to the iPad with git, Python, Node.js, VS Code and a terminal, and Claude Code is listed in its store.
Run your own always-on agent team on your PC with Claude Code
Unable to use Dots, Muse or Grok Bot, the author built Crew, a free open-source team of AI agents that lives on a PC, runs on Claude Code and keeps working after you walk away.
Build your own agent workspace where Claude Code and Codex share one database
A developer built his own agent harness workspace on top of Claude Code, Codex, OpenCode and Grok Build. All sessions share one SQLite database, work streams are Discord-style channels, and each agent has its own persona, memory, skills and scheduled jobs.