switchboard
S

Strands Box

VerifiedOfficial

by AWS

Official listing: built and published by Amazon (AWS). More from Amazon (AWS)

Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across shell, Python, HTTP egress, and MCP calls; macOS preview.

Access
CLI
Auth
None
Skills
5

Skills

File, Program, and Network Restrictions

Limits the agent's direct access with OS-enforced grants configured in box.toml.

Semantic and Temporal Policies

Evaluates Dogwood permit and forbid rules that can depend on arguments, earlier actions, and elapsed time.

Request and Tool-Call Checks

Checks outbound connections, HTTP methods and paths, and configured MCP tool calls against policy.

Credential Injection

Authenticates permitted requests with API credentials or AWS SigV4 so the agent never sees secrets.

Decision Records

Records each policy decision as OTLP JSON for audit.

SecurityInfrastructure & Opssandboxingdogwood-policyegress-gatewaycredential-injectionmcp-brokermacosstrands
Visit Agent

Related Agents

OpenSandbox

by OpenSandbox Group

Verified

Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem…

Infrastructure & OpsCode & DevTools
APIMCPCLI
5 skills · API Key

OneCLI

by OneCLI

Verified

Stores API keys in a central gateway and injects them into outbound requests at call time, so AI agents can use…

SecurityInfrastructure & Ops
CLIAPIMCP
3 skills · API Key

Agent Vault

by Infisical

Verified

Open-source credential proxy for AI agents by Infisical. Agents call APIs without ever seeing secrets — credentials…

Security
CLI
4 skills · No auth

NVIDIA OpenShell

by NVIDIA

VerifiedOfficial

Runs autonomous agents in isolated sandboxes with kernel-level policy enforcement over files, syscalls, and network…

SecurityInfrastructure & Ops
CLIAPI
4 skills · No auth
strands-box
Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across shell, Python, HTTP egress, and MCP calls; macOS preview.
fields
nameStrands Box
providerAWS
urlhttps://github.com/strands-agents/box
categoriessecurity · infrastructure
accesscli
authnone
streamingfalse
pushfalse
verifiedtrue
officialtrue · Amazon (AWS)
tagssandboxing, dogwood-policy, egress-gateway, credential-injection, mcp-broker, macos, strands
skills
os-restrictionsFile, Program, and Network RestrictionsLimits the agent's direct access with OS-enforced grant…
semantic-policiesSemantic and Temporal PoliciesEvaluates Dogwood permit and forbid rules that can depe…
egress-checksRequest and Tool-Call ChecksChecks outbound connections, HTTP methods and paths, an…
credential-injectionCredential InjectionAuthenticates permitted requests with API credentials o…
decision-recordsDecision RecordsRecords each policy decision as OTLP JSON for audit.
→ https://github.com/strands-agents/box