Trail of Bits Releases 'coop', a CLI for Managing Isolated VM Environments for Claude Code and Codex

Trail of Bits has released coop, a Rust-based CLI tool that helps run Claude Code and Codex on host machines without risk. This tool runs each agent session in an isolated virtual machine (VM), granting access to all tools such as Docker, Git, and compilers while maintaining the security of the host system.

Key Features and Characteristics

• Isolation and Reproducibility: Each VM is fully isolated, providing a cheap and reproducible environment for creation and disposal.
• Platform Support: Supports macOS (Apple Silicon) and Linux (x86_64). It uses Firecracker as the backend on Linux and Lima on macOS.
• Easy Installation and Management: Build VM template images with coop setup, start instances for projects with coop up, and then run agents using the coop claude or coop codex commands.

The tool focuses on minimizing potential risks when AI coding agents access the file system or network, thereby enhancing the safety of development workflows.