coop coop
coop is a Rust CLI from Trail of Bits that runs Claude Code and Codex inside disposable, isolated virtual machines so the agents can have full tool access — Docker, git, compilers, package managers, passwordless sudo — without any risk to your host. On Linux it boots Firecracker microVMs on KVM; on macOS it uses Lima with Apple's Virtualization.framework, choosing the backend automatically. `coop up` creates or reuses an environment for the current project and syncs the workspace in, then `coop claude` or `coop codex` launches the agent with permission prompts disabled by default because the VM itself is the isolation boundary (pass --ask to restore prompts). coop forwards API keys, GitHub tokens and chosen env vars into the guest — or keeps model keys entirely host-side in proxy mode — injects CLAUDE.md, syncs ~/.codex config, supports plugins/marketplaces and MCP server configuration, understands devcontainer.json, and offers editor integration, multi-instance workflows and shell completion. A published trust model documents the VM boundary and how guest-authored data is treated as untrusted.
coop was trending on GitHub in September 2026; recent releases added Codex support with a dedicated `coop codex` launcher, devcontainer.json inspection, an in-app `coop update` command and a formal trust-model document.
As of
- Disposable isolated VMs for Claude Code and Codex: Firecracker microVMs (Linux/KVM) or Lima + Virtualization.framework (macOS)
- Agents run with bypassPermissions / full tool access — the VM is the blast radius
- coop up / coop claude / coop codex with project workspace sync
- API-key forwarding or proxy mode that keeps model keys off the guest
- CLAUDE.md injection, ~/.codex sync, plugins, MCP server config, devcontainer.json support
- Multi-instance, editor integration, shell completion and coop update
- Documented trust model and security policy from Trail of Bits
Security-conscious developers who want to let Claude Code or Codex run fully autonomously on real projects without exposing their host machine.
Windows users, machines without KVM or Apple Silicon virtualization, and agents other than Claude Code and Codex (no generic agent support yet).
coop is free and open source under the Apache-2.0 license from security firm Trail of Bits. Install with the one-line script or build from source (Rust + CMake). Linux needs KVM for Firecracker; macOS needs Lima (brew install lima) and Apple Silicon. You bring your own Claude Code / Codex subscription or API keys.
coop brings Trail of Bits' security rigor to the 'run the agent in YOLO mode' problem: hardware-isolated microVMs that spin up cheaply, sync your project in and keep secrets out — a serious upgrade over Docker sandboxes for anyone letting agents run unattended.
Is coop free?
Yes - coop is Open Source. coop is free and open source under the Apache-2.0 license from security firm Trail of Bits. Install with the one-line script or build from source (Rust + CMake). Linux needs KVM for Firecracker; macOS needs Lima (brew install lima) and Apple Silicon. You bring your own Claude Code / Codex subscription or API keys.
Is coop open source?
Yes - coop is open source. coop is free and open source under the Apache-2.0 license from security firm Trail of Bits. Install with the one-line script or build from source (Rust + CMake). Linux needs KVM for Firecracker; macOS needs Lima (brew install lima) and Apple Silicon. You bring your own Claude Code / Codex subscription or API keys.
Who is coop best for?
Security-conscious developers who want to let Claude Code or Codex run fully autonomously on real projects without exposing their host machine.
Who is coop not ideal for?
Windows users, machines without KVM or Apple Silicon virtualization, and agents other than Claude Code and Codex (no generic agent support yet).
What are the best coop alternatives?
The closest coop alternatives on ai.dosa.dev are Pieces for Developers, agenttrace, Vibe Kanban - all listed under Developer Productivity & Workflow.
Who makes coop?
coop is developed by Trail of Bits. It is listed in the Developer Productivity & Workflow category on ai.dosa.dev.
Favorite this tool to revisit it later, or Zap it to contribute to the public vote count.
Content on this page is AI-generated. Please verify details with the vendor's website for accuracy.