sandbaseai/sandbase-harness

View on GitHub ↗

Open-source CMA-compatible agent runtime for any model, with MCP tools, sandboxed sessions, audit, replay, and a local console. Includes a native DeepSeek Harness bundle over stdio MCP.

617 ★58 forksTypeScriptUpdated 19d ago

What you need to know

Local-first runtime for AI agents that adds persistent sessions, sandboxed tools, memory, credential vaults, audit trails, and a built-in Console, exposing a Claude Managed Agents-style /v1 API and a DeepSeek Harness bridge over MCP stdio.

Install

git clone --branch v0.3.2 --depth 1 https://github.com/sandbaseai/sandbase-harness.git
cd sandbase-harness && npm ci && npm run build

Usage

  • Init a workspace: node ../sandbase-harness/dist/index.js init && node ../sandbase-harness/dist/index.js start.
  • Open http://127.0.0.1:3000/dashboard, go to Settings > Models, and paste a model provider API key.
  • Run as a DeepSeek Harness plugin: export MANAGED_AGENTS_URL=http://127.0.0.1:3000 && dsh plugin --profile web add managed-agents && dsh web.
  • The six-tool MCP bridge also ships as a Docker image (Dockerfile.mcp) pointed at the Harness API.

Key features

  • SQLite-backed agents, sessions, environments, credential vaults, memory stores, files, skills, and API keys.
  • Sandbox backends: local process, Docker (per-session containers), Kubernetes, and self-hosted worker queue.
  • Resumable Server-Sent Events for session replay and debugging.
  • MCP toolsets, permission policies, built-in tools, and skill packages.
  • DeepSeek Harness bridge exposing mcp__sandbase__* tools for agents, sessions, streamed turns, artifacts, and cancellation.

Best for

Running agents that need governance, sandboxing, credential handling, and inspectability beyond a bare model loop.

Caveats

  • Install only from the tagged GitHub source release shown — the unscoped 'managed-agents' name on npm is NOT this project (do not run npx managed-agents).
  • Requires Node.js 22+ and npm 10+; Docker is optional and only for Docker-backed sandboxes.
  • Open by default; authentication only activates once at least one API key exists.
  • Apache-2.0.
Platforms: Local · RemoteClients: DeepSeek Harness

Reviewed 2026-08-18

Topics

Stars
617★
Forks
58
Language
TypeScript
License
Apache-2.0
Created
2026-07-11
Last push
2026-08-17