Cleat

Cleat is a free, MIT-licensed, single-file command-line tool that runs AI coding agents like Claude Code inside a per-project Docker container. One command drops the agent into the container with permission prompts bypassed by default, so it works unattended at full speed while your host credentials (SSH keys, cloud tokens, the macOS Keychain) never enter the box. A destructive command's blast radius stops at the single project you mounted. Opt-in capabilities grant git, ssh, gh or env access one at a time when you need them. It is a container, not a microVM, so it targets credential exfiltration and destructive mistakes rather than kernel escape. Runs on macOS and Linux (Windows via WSL2).