Run sandboxed Claude Code fleet sharing files via MCP
Claude Code farm, each worker jailed. File I/O only via MCP to an agentfiles:// fake disk; the orchestrator alone talks to AWS. Credentials stay outside the sandboxes; every call is logged.
- Agent or tool
- Claude Code
- Topic
- DevOps & Infra
- Reported on
- Hacker News
- Added
- 2026-10-15
Why it matters
Keeping servers and pipelines healthy is constant, detail-heavy work. Agents that can read logs and run routine fixes are a big help, as long as a person keeps an eye on what changes. It is one of 40 sightings filed under DevOps & Infra on Agent Sightings (number 27 by interest), and one of 164 involving Claude Code.
How you could try it
Here is a reusable prompt, written by us in our own words, that captures the task. Paste it into Claude Code or any similar agent and adjust the details to your situation.
Design a sandboxed agent fleet that shares files only via MCP on a virtual filesystem. Keep cloud credentials in the orchestrator, log every tool call, and do not expose raw AWS access to the agents.
Tip: Try it first on a staging system or with read-only credentials, and require approval for anything that changes production.
Source
Read the original first-hand account on Hacker News: https://news.ycombinator.com/item?id=49782293. Our summary is a paraphrase; details are in the source.