Built by the NLB team
A private cloud workspace your coding agent can drive
Isolated, TTL-bound Docker workspaces behind authenticated MCP, with Git credentials kept out of the sandbox.
Visit Cloud Harness(opens in a new tab)Gallery
Features
Isolated workspaces
Each repository clone runs in its own TTL-bound Docker executor.
Authenticated MCP
Streamable HTTP MCP with managed OAuth or dashboard API keys.
Credential-free sandbox
Fetch, pull and push go through an ephemeral helper with short-lived GitHub App tokens.
Full toolset
Files, code intelligence, shells, sessions, tasks, worktrees and memory.
Local mode
Run over stdio against one folder, or a registry of several folders.
Technology stack
- Runtime
- Node.js 24+
- Language
- TypeScript
- Protocol
- MCP SDK
- Server
- Express 5
- Executors
- Docker
- State
- SQLite
- API-key gateway
- Cloudflare Workers
- Git access
- GitHub App
Pricing
Open source
PopularFree/MIT license
- Self-host the gateway and executors
- Remote MCP or local stdio mode
- GitHub App based Git access
Questions
How do I try it locally?
Build the repository, then run cloud-harness-mcp --transport stdio --workspace /path/to/project and point your MCP client at it.
Where do GitHub credentials live?
Outside the executor. Git operations go through an ephemeral helper that uses short-lived GitHub App tokens.
Is it open source?
Yes, under the MIT license at github.com/bestagentkits/cloud-harness-mcp.
Maker
Duy Nguyen
CTO and co-founder of T.O.P Group, creator of GoClaw and UI UX Pro Max, and founder of the Build in Public Vietnam community.
Give your agent a safe place to work
Self-host Cloud Harness MCP and connect any MCP client.
Star it on GitHub(opens in a new tab)