← Back to Build with AK directory
MIT licensedStreamable HTTP MCP70+ MCP toolsNon-root Docker executorsLocal stdio mode

Give your agents a real workspace, not your laptop

Isolated repository clones in TTL-bound Docker executors, driven over authenticated Streamable HTTP MCP. Short-lived Git tokens, zero host sockets.

Isolated, TTL-bound workspaces

Each workspace is a fresh clone inside a bounded, non-root Docker executor. Leases renew explicitly, and closing a workspace terminates and removes the container.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp#coding-workflow

Secrets stay out of the sandbox

Push and fetch go through a sibling transfer repository and an ephemeral Git helper fed a short-lived GitHub App token over stdin. The executor never sees a control-plane credential.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp/blob/main/docs/security-model.md

A full coding tool surface

Files, patches, grep and symbol search; exec, persistent shells, sessions and DAG task graphs; Git status through push, worktrees and GitHub actions; artifact snapshots and restore.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp#mcp-tools

Repository skills, hooks and memories

Agents discover and run repository-defined skills and hooks, keep durable memories, and trigger owner-reviewed deployment recipes. Skills are also served over the MCP Skills extension.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp/blob/main/docs/mcp-api.md

OAuth or API keys, your choice

Managed OAuth through Cloudflare Access for interactive clients, plus a separate API-key gateway for static-header clients and CI.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp#connect-from-ai-clients

Local stdio mode

Point it at a project folder on your machine and get the same tools over stdio, with path confinement and network Git and push off by default. Serve several folders from one process with a workspace registry.

✓ Verified claim:https://github.com/bestagentkits/cloud-harness-mcp#local-stdio-workspace-mode

Feature Gallery

1/5
Cloud Harness MCP hero: Autonomous Coding, Isolated Sandboxes, Zero Credential Leaks, with a workspace_open terminal trace

Cloud Harness MCP hero: Autonomous Coding, Isolated Sandboxes, Zero Credential Leaks, with a workspace_open terminal trace

Cloud Harness MCP hero: Autonomous Coding, Isolated Sandboxes, Zero Credential Leaks, with a workspace_open terminal trace

Connect your agent

Add the MCP URL to Claude Code, Cursor, Codex or ChatGPT and sign in through OAuth, or send a dashboard API key from a static-header client.

Open a workspace

The agent calls `workspace_open` with a credential-free HTTPS repository URL and an idempotency key. The harness clones it into a fresh non-root executor and returns an opaque workspaceId.

Code, test, push, close

The agent edits, runs tests and tasks, commits and calls `git_push` through the broker. `workspace_close` removes the executor and its state.

Built with AgentKit

AgentKit Engineer
Coding agents are only as useful as the place they run. Running them on a laptop hands them every credential on the machine; running them in a generic container leaves them without Git, tests or memory. Cloud Harness MCP started on 2026-08-16 as an MVP that split the two concerns: MCP as the control protocol, Docker executors as the runtime, and a broker that keeps GitHub tokens out of both. Each step since was planned in the repo's plans folder and shipped through small reviewed PRs: local stdio mode, task DAGs, worktrees, an operator dashboard, skills over MCP. It also speaks AgentKit natively: executors bundle a pinned AgentKit CLI, and licensed AgentKit kits mount as owner skills.

Technology Stack

TypeScriptNode.jsModel Context ProtocolStreamable HTTPExpressZodDockerSQLitenginxCloudflare AccessCloudflare WorkersGitHub AppsOctokitPinoDocker ComposeMermaid
“
“Autonomous Coding. Isolated Sandboxes. Zero Credential Leaks.”
The Cloud Harness MCP teamSource: https://harness.agentkit.best/

What's shipped

  1. v0.66.0 released (opens in a new tab)

    Latest stable release of the harness, rolling up the October work on local workspaces, OAuth session lifetimes and the API-key MCP lane.

  2. Many local workspaces behind one MCP server (opens in a new tab)

    Register several persistent project folders in one YAML or JSON file and serve them from a single stdio or local HTTP process, each with its own confinement and stable workspaceId.

  3. Inbound OAuth session lifetimes in Dashboard Settings (opens in a new tab)

    Owners now manage how long MCP OAuth sessions last directly from the dashboard.

  4. Repository guidance bootstrapped into agent context (opens in a new tab)

    Managed agents start with the repository's own guidance loaded into context.

  5. Native PR reviews and merge lifecycle (opens in a new tab)

    GitHub pull request reviews, review threads, reviewers and merge are available as harness operations.

  6. Skills served over the MCP Skills extension (opens in a new tab)

    Built-in, owner and workspace-bound skills are served through the SEP-2640 Skills extension.

  7. Operator console redesign (opens in a new tab)

    A new art direction and layout for the operator dashboard.

  8. Licensed AgentKit kits mount as owner skills (opens in a new tab)

    Owners with AgentKit licenses get their kits mounted as skills inside harness workspaces.

Live status

Operational
Successful checks (30 days)
99.57%
Last response time
236 ms
Last checked (UTC)

Recent checks · oldest to newest

  1. 2026-10-20T22:57:00.766Z: Operational, 85 ms
  2. 2026-10-20T23:03:00.822Z: Operational, 129 ms
  3. 2026-10-20T23:09:00.877Z: Operational, 142 ms
  4. 2026-10-20T23:15:00.805Z: Operational, 75 ms
  5. 2026-10-20T23:20:00.940Z: Operational, 86 ms
  6. 2026-10-20T23:26:00.879Z: Operational, 100 ms
  7. 2026-10-20T23:32:00.854Z: Operational, 77 ms
  8. 2026-10-20T23:38:00.869Z: Operational, 84 ms
  9. 2026-10-20T23:44:00.982Z: Operational, 154 ms
  10. 2026-10-20T23:50:00.957Z: Operational, 143 ms
  11. 2026-10-20T23:56:00.946Z: Operational, 97 ms
  12. 2026-10-21T00:02:00.973Z: Operational, 120 ms
  13. 2026-10-21T00:08:01.027Z: Operational, 142 ms
  14. 2026-10-21T00:14:00.997Z: Operational, 89 ms
  15. 2026-10-21T00:20:01.076Z: Operational, 112 ms
  16. 2026-10-21T00:26:01.086Z: Operational, 151 ms
  17. 2026-10-21T00:32:01.058Z: Operational, 100 ms
  18. 2026-10-21T00:38:01.109Z: Operational, 105 ms
  19. 2026-10-21T00:44:01.082Z: Operational, 100 ms
  20. 2026-10-21T00:50:00.192Z: Operational, 147 ms
  21. 2026-10-21T00:55:01.148Z: Operational, 151 ms
  22. 2026-10-21T01:01:00.178Z: Operational, 128 ms
  23. 2026-10-21T01:07:00.227Z: Operational, 172 ms
  24. 2026-10-21T01:13:00.224Z: Operational, 167 ms
  25. 2026-10-21T01:19:00.171Z: Operational, 120 ms
  26. 2026-10-21T01:25:00.232Z: Operational, 154 ms
  27. 2026-10-21T01:31:00.234Z: Operational, 166 ms
  28. 2026-10-21T01:37:00.234Z: Operational, 164 ms
  29. 2026-10-21T01:43:00.220Z: Operational, 123 ms
  30. 2026-10-21T01:49:00.215Z: Operational, 111 ms
  31. 2026-10-21T01:55:00.267Z: Operational, 156 ms
  32. 2026-10-21T02:01:00.263Z: Operational, 152 ms
  33. 2026-10-21T02:07:00.279Z: Operational, 152 ms
  34. 2026-10-21T02:13:00.260Z: Operational, 138 ms
  35. 2026-10-21T02:19:00.251Z: Operational, 125 ms
  36. 2026-10-21T02:25:00.242Z: Operational, 107 ms
  37. 2026-10-21T02:31:00.263Z: Operational, 109 ms
  38. 2026-10-21T02:37:00.293Z: Operational, 141 ms
  39. 2026-10-21T02:43:00.281Z: Operational, 130 ms
  40. 2026-10-21T02:49:00.268Z: Operational, 102 ms
  41. 2026-10-21T02:55:00.358Z: Operational, 178 ms
  42. 2026-10-21T03:01:00.556Z: Operational, 383 ms
  43. 2026-10-21T03:07:00.776Z: Operational, 596 ms
  44. 2026-10-21T03:13:00.809Z: Operational, 614 ms
  45. 2026-10-21T03:19:00.424Z: Operational, 202 ms
  46. 2026-10-21T03:25:00.492Z: Operational, 251 ms
  47. 2026-10-21T03:31:00.361Z: Operational, 141 ms
  48. 2026-10-21T03:37:00.428Z: Operational, 184 ms
  49. 2026-10-21T03:43:00.420Z: Operational, 171 ms
  50. 2026-10-21T03:49:00.468Z: Operational, 174 ms
  51. 2026-10-21T03:55:00.700Z: Operational, 410 ms
  52. 2026-10-21T04:01:00.434Z: Operational, 148 ms
  53. 2026-10-21T04:07:00.440Z: Operational, 111 ms
  54. 2026-10-21T04:13:01.006Z: Operational, 624 ms
  55. 2026-10-21T04:19:00.924Z: Operational, 567 ms
  56. 2026-10-21T04:25:00.553Z: Operational, 212 ms
  57. 2026-10-21T04:31:00.493Z: Operational, 145 ms
  58. 2026-10-21T04:37:00.610Z: Operational, 201 ms
  59. 2026-10-21T04:43:00.577Z: Operational, 160 ms
  60. 2026-10-21T04:49:00.613Z: Operational, 197 ms
  61. 2026-10-21T04:55:00.581Z: Operational, 141 ms
  62. 2026-10-21T05:01:00.646Z: Operational, 220 ms
  63. 2026-10-21T05:07:01.029Z: Operational, 587 ms
  64. 2026-10-21T05:13:00.586Z: Operational, 131 ms
  65. 2026-10-21T05:19:00.669Z: Operational, 192 ms
  66. 2026-10-21T05:25:00.686Z: Operational, 163 ms
  67. 2026-10-21T05:31:00.657Z: Operational, 150 ms
  68. 2026-10-21T05:37:00.657Z: Operational, 140 ms
  69. 2026-10-21T05:43:01.185Z: Operational, 616 ms
  70. 2026-10-21T05:49:00.959Z: Operational, 380 ms
  71. 2026-10-21T05:55:01.181Z: Operational, 572 ms
  72. 2026-10-21T06:01:00.908Z: Operational, 303 ms
  73. 2026-10-21T06:07:01.002Z: Operational, 411 ms
  74. 2026-10-21T06:13:00.968Z: Operational, 357 ms
  75. 2026-10-21T06:19:00.729Z: Operational, 111 ms
  76. 2026-10-21T06:25:00.904Z: Operational, 294 ms
  77. 2026-10-21T06:31:01.070Z: Operational, 433 ms
  78. 2026-10-21T06:37:00.837Z: Operational, 192 ms
  79. 2026-10-21T06:43:01.296Z: Operational, 642 ms
  80. 2026-10-21T06:49:00.855Z: Operational, 150 ms
  81. 2026-10-21T06:55:01.290Z: Operational, 621 ms
  82. 2026-10-21T07:01:01.409Z: Operational, 657 ms
  83. 2026-10-21T07:07:01.336Z: Operational, 593 ms
  84. 2026-10-21T07:13:01.407Z: Operational, 634 ms
  85. 2026-10-21T07:19:00.953Z: Operational, 162 ms
  86. 2026-10-21T07:25:01.460Z: Operational, 690 ms
  87. 2026-10-21T07:31:01.633Z: Operational, 798 ms
  88. 2026-10-21T07:37:01.443Z: Operational, 605 ms
  89. 2026-10-21T07:43:01.264Z: Operational, 433 ms
  90. 2026-10-21T07:49:01.192Z: Operational, 272 ms
  91. 2026-10-21T07:55:01.080Z: Operational, 157 ms
  92. 2026-10-21T08:01:01.563Z: Operational, 644 ms
  93. 2026-10-21T08:07:01.168Z: Operational, 251 ms
  94. 2026-10-21T08:13:01.211Z: Operational, 223 ms
  95. 2026-10-21T08:19:01.113Z: Operational, 136 ms
  96. 2026-10-21T08:25:01.208Z: Operational, 236 ms

1385 recorded checks in 30 days. Availability reflects sampled checks, not a continuous uptime guarantee.

Ready to experience it?

MIT licensed and self-hostable with Docker Compose. Read the security model first: it is built for one trusted operator domain.

Independently operated by the maker; built with help from AgentKit; listing does not imply endorsement or guarantee.