SCC CLI

Sandbox Claude Code in Docker with a team-managed coding CLI and guardrails

Find Your Path

I'm joining a team Get running in 30 seconds with your team's config

I manage a team Configure plugins and profiles for your developers

I'm an org admin Set up security policies and governance

I'm evaluating SCC Learn what SCC does and why

If you are searching for a Claude Code sandbox or a sandboxed coding CLI, start here.

Claude Code Sandbox How SCC CLI isolates Claude Code in Docker with guardrails and team policies

Security Model Understand isolation boundaries, policies, and threat assumptions

Why Sandbox Claude Code Understand the risks and how sandboxing mitigates them

See How SCC Compares Compare SCC to local execution, dev containers, and manual Docker

Isolated Execution

Code runs in Docker sandboxes. Your host system stays protected from AI-generated commands.

Standardized Configs

Organization-managed profiles distributed via a single URL. No manual setup for developers.

Git Guardrails

Block destructive commands like push --force and reset --hard automatically with safety-net policies.

Parallel Development

Isolated git worktrees per feature branch. Multiple Claude sessions without conflicts.

Install SCC CLI
Terminal window
uv tool install scc-cli
Terminal window
pipx install scc-cli
Terminal window
pip install scc-cli
Verify your environment
Terminal window
```
scc doctor
```

Configure and launch

scc setup    # Paste your org config URL
scc start    # Launch in current directory

Setting	Org Admin	Team Lead	Developer
Block dangerous plugins	✅ Sets	❌ Cannot override	❌ Cannot override
Default plugins for all teams	✅ Sets	—	—
Team-specific plugins	✅ Approves	✅ Chooses	—
Project-local config (.scc.yaml)	✅ Can restrict	✅ Can restrict	✅ Extends
Safety-net policy	✅ Sets	❌ Cannot override	❌ Cannot override

Learn more about governance Understand the full delegation and security model