Minimal CLI
An isolated box for coding agents on your own machine: access only to chosen projects and credentials, secured registry
- 240 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- The install script downloads and runs a program from the network, so read it first
- A wrong minimal.toml can give the agent more access to files and credentials than needed
- Tokens and keys are passed into the sandbox and should be granted narrowly
Install
- Works in
Manual install
curl --proto "=https" --tlsv1.2 -fsSL 'https://go.minimal.dev/stable' | shInstalls the stable channel, adds min to PATH and sets up completions for bash, fish and zsh. Read the script before running.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The install script downloads and runs a program from the network, so read it first
- A wrong minimal.toml can give the agent more access to files and credentials than needed
- Tokens and keys are passed into the sandbox and should be granted narrowly
This is third-party code. Review the repository files before installing.
What it does
Minimal runs coding agents in an isolated box on your own computer. An unattended agent can only touch what you give it, so access is scoped to specific projects, files, credentials and configs. The box is built from a `minimal.toml` that lists the tools the agent needs, the files and the isolation mechanisms. On Linux the box is an unprivileged user namespace by default, or a libkrun microVM with `--provider local-minvmd`. On macOS it is always a libkrun microVM. Inside run git, claude, compilers, shells and other programs delivered by a secured package manager from a registry refreshed daily. The coding agents packaged today are claude, codex, opencode and pi. Three commands start a session: install, `min init` and `min session activate --attach`. The `min dash` command opens a UI of all sessions and branches. Your own editor, shell and configs are added as loadouts. For agents setting it up there is a `minimal` plugin with a `minimal-setup` skill.
Who it is for. Developers and teams who run agents unattended and want to limit access to projects and credentials without giving up autonomy.
Good fit when
- An agent works overnight and needs only one repository and no credentials
- A new project is created inside a sandbox and the GitHub token is handed over only after the agent exits
- One agent needs specific compilers and tools at known versions
- Several branches of one repository run in parallel in separate sessions
- A team shares a minimal.toml in the repository so everyone gets the same environment
Not a fit when
- Windows and platforms outside the list: macOS on ARM64 and Ubuntu or Debian are supported
- You want isolation with no new tool and no curl install: Minimal installs with its own script
- The agent must roam the whole disk freely: access here is set explicitly
Example request
Start a Minimal session in this repository with the claude agent and show the session list in min dashLimitations
Supported are macOS on Apple Silicon and Ubuntu and Debian on ARM64 and x86_64 with a Linux kernel 5.10 or newer, and non-VM mode needs rootless namespace creation enabled. Installation is a curl script that puts `min` on PATH and sets up completions, so read it before running. Removal is the same script with the `--uninstall` flag. In the worked example the GitHub token sits in the macOS keychain and is revealed to the sandbox only after the agent exits. The last commit is from November 2026.
How to disable. Run the install script with the --uninstall flag: curl --proto "=https" --tlsv1.2 -fsSL https://go.minimal.dev/stable | sh -s -- --uninstall. minimal.toml files and loadouts stay in your repositories.
FAQ
What is a Minimal box?
An isolated environment on your machine. On Linux it is a user namespace or a libkrun microVM, on macOS always libkrun. Its contents are set by a minimal.toml file.
How do I start in three commands?
Install Minimal with the script, run min init in the repository root and then min session activate --attach. No GitHub token, keychain entry or account is needed.
Which agents are packaged?
Today claude, codex, opencode and pi. Packages are delivered by a secured package manager from a registry refreshed daily.
What is a loadout?
A set of your own preferences on top of the project environment: editor, shell and configs. It goes into ~/.config/minimal/loadouts/dev, for example by cloning a repository.
How do I watch sessions?
With min dash: each row shows a session and its branch, enter attaches and q quits.
Discussion
No questions or reviews yet.
Related
CLI toolsagents-sandbox runs a coding agent inside a separate microVM, hiding the rest of your system and secrets from it.
Container-free sandbox for AI agents on Linux and macOS: files, network and syscalls stay closed until you open them explicitly
A Go CLI that runs a coding agent in an OS sandbox with skills and secrets behind a bridge and isolated files and network.
The safehouse command runs Claude Code, Codex and other agents in a macOS sandbox: files are closed by default and you open folders with flags
cli sandbox for ai agents without containers or daemons: runs Claude Code, Codex, or OpenCode with restricted access to files, network, and credentials
A single binary runs coding agents inside an isolated sandbox: a microVM, network policies and secrets hidden from the agent.
README in short
The description explains that Minimal runs agents in an isolated box and lists platforms, installation, a section for agents, session examples and creating a project inside a sandbox. Loadouts and documentation links follow.