sandbaseai/sandbase-harness
View on GitHub ↗Open-source CMA-compatible agent runtime for any model, with MCP tools, sandboxed sessions, audit, replay, and a local console. Includes a native DeepSeek Harness bundle over stdio MCP.
617 ★58 forksTypeScriptUpdated 19d ago
What you need to know
Local-first runtime for AI agents that adds persistent sessions, sandboxed tools, memory, credential vaults, audit trails, and a built-in Console, exposing a Claude Managed Agents-style /v1 API and a DeepSeek Harness bridge over MCP stdio.
Install
git clone --branch v0.3.2 --depth 1 https://github.com/sandbaseai/sandbase-harness.git cd sandbase-harness && npm ci && npm run build
Usage
- •Init a workspace: node ../sandbase-harness/dist/index.js init && node ../sandbase-harness/dist/index.js start.
- •Open http://127.0.0.1:3000/dashboard, go to Settings > Models, and paste a model provider API key.
- •Run as a DeepSeek Harness plugin: export MANAGED_AGENTS_URL=http://127.0.0.1:3000 && dsh plugin --profile web add managed-agents && dsh web.
- •The six-tool MCP bridge also ships as a Docker image (Dockerfile.mcp) pointed at the Harness API.
Key features
- ✓SQLite-backed agents, sessions, environments, credential vaults, memory stores, files, skills, and API keys.
- ✓Sandbox backends: local process, Docker (per-session containers), Kubernetes, and self-hosted worker queue.
- ✓Resumable Server-Sent Events for session replay and debugging.
- ✓MCP toolsets, permission policies, built-in tools, and skill packages.
- ✓DeepSeek Harness bridge exposing mcp__sandbase__* tools for agents, sessions, streamed turns, artifacts, and cancellation.
Best for
Running agents that need governance, sandboxing, credential handling, and inspectability beyond a bare model loop.
Caveats
- ⚠Install only from the tagged GitHub source release shown — the unscoped 'managed-agents' name on npm is NOT this project (do not run npx managed-agents).
- ⚠Requires Node.js 22+ and npm 10+; Docker is optional and only for Docker-backed sandboxes.
- ⚠Open by default; authentication only activates once at least one API key exists.
- ⚠Apache-2.0.
Platforms: Local · RemoteClients: DeepSeek Harness
Reviewed 2026-08-18
Topics
agent-frameworkagent-observabilityagent-runtimeagent-sandboxai-agentsai-infrastructuredeepseekdeepseek-harnessdeepseek-v4dockerdshdsh-pluginlocal-firstmcp-servermodel-context-protocolopenai-compatiblesandboxself-hostedtypescriptworkflow-automation
- Stars
- 617★
- Forks
- 58
- Language
- TypeScript
- License
- Apache-2.0
- Created
- 2026-07-11
- Last push
- 2026-08-17