Open source security for AI agents: an OS-enforced egress wall on macOS, and on Ubuntu 24.04 x86-64 via a separate package; keys only the operator holds; a hash-chained audit record. One command wraps Claude Code, Cursor, Hermes, OpenClaw or Cline on tested config paths. No vendor in the path.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add sanctuary -- npx -y @sanctuary-framework/mcp-server~/.codex/config.toml
[mcp_servers.sanctuary]
command = "npx"
args = ["-y", "@sanctuary-framework/mcp-server"]
# codex mcp add sanctuary -- npx -y @sanctuary-framework/mcp-server~/.cursor/mcp.json
{
"mcpServers": {
"sanctuary": {
"command": "npx",
"args": [
"-y",
"@sanctuary-framework/mcp-server"
]
}
}
}.vscode/mcp.json
{
"servers": {
"sanctuary": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@sanctuary-framework/mcp-server"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"sanctuary": {
"command": "npx",
"args": [
"-y",
"@sanctuary-framework/mcp-server"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"sanctuary": {
"command": "npx",
"args": [
"-y",
"@sanctuary-framework/mcp-server"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"sanctuary": {
"command": "npx",
"args": [
"-y",
"@sanctuary-framework/mcp-server"
]
}
}
}