# Sandbox

On a Mac and on Linux the agents can run inside Anthropic's sandbox-runtime (`srt`). It is on by default. Each tool then:

- writes only to its folders, its own state and temp;
- can't read your keychains, mail or other apps' data;
- opens no windows;
- reaches the network only through srt's proxy, to the hosts it needs.

It works alongside [tool access](https://tryhover.co/docs/access.md): access decides what an agent may ask for, the sandbox limits what it can touch.

## Setting it up

Switch it off or on in Settings. If `srt` isn't installed the agents start unsandboxed, and Settings says what is missing (on a Mac it does not list the missing pieces, so check for both).

| | Needs |
| --- | --- |
| macOS | `srt` and `rg`: `npm install -g @anthropic-ai/sandbox-runtime@0.0.78` and `brew install ripgrep` |
| Linux | `srt` and bubblewrap |
| Windows | Not available; the switch is off and says why |

> **Note:** Any feature your system can't run is shown off with its reason beside it.

---

Part of the [Hover docs](https://tryhover.co/docs.md) (Configure). HTML version: https://tryhover.co/docs/sandbox. Index for agents: https://tryhover.co/llms.txt