Claude Code,
in a container.
A single Go binary that runs Claude Code in Docker. Outbound traffic is blocked by default. Docker is the only dependency.
$ brew install back2base/back2base/back2base $ back2base install # check prereqs, build the image $ back2base login # link your Claude subscription $ back2base
$ curl -fsSL https://back2base.github.io/apt-back2base/public.key \ | sudo gpg --dearmor -o /usr/share/keyrings/back2base.gpg $ echo "deb [signed-by=/usr/share/keyrings/back2base.gpg] https://back2base.github.io/apt-back2base stable main" \ | sudo tee /etc/apt/sources.list.d/back2base.list $ sudo apt update && sudo apt install back2base $ back2base install $ back2base login $ back2base
Features
Isolated by default
The agent runs in a container. Your host stays clean.
Default-deny egress
An iptables allowlist covers only the APIs your MCP servers need.
OTLP telemetry
Send traces, metrics, and logs to your own collector. Off until you enable it.
Your MCP servers
Pick your own servers and profiles. They sync to your account.
Org settings respected
Your organization's existing Claude Code settings take precedence.
Prompt caching
Image layers are ordered to keep Anthropic's prompt cache warm.
One binary
No Node, Python, or dotfiles on the host. Just Docker.
Editions
Hosted or open source
Both run the same container.
Hosted
back2base
For working across several machines.
- Session memory synced across devices
- Config and MCP profiles synced across devices
- Browser client at chat.back2base.net
- Managed API gateway
Open source
oss-back2base
No account or hosted services.
- Same container and firewall
- Same MCP server registry
- Builds from source with Go
- MIT licensed
Requirements
What you need
macOS is the main platform. Linux is supported through APT.