terminal-mac Puts Isolated macOS in Terminal
terminal-mac runs a real macOS guest inside Apple’s Virtualization framework, streaming its desktop into Ghostty, Kitty, or iTerm2. Agents can click, type, and inspect the guest through MCP without touching the host Mac’s pointer, clipboard, apps, or files.
This is a compelling answer to the “give agents your whole computer” problem, though it is still an early release candidate rather than a hardened sandbox.
- –Ships computer-use tools for screenshots, clicking, dragging, scrolling, typing, keyboard input, and status checks
- –Supports Claude Code, Codex, Cursor, VS Code, Windsurf, and other MCP clients
- –Requires Apple silicon, macOS 14+, significant storage, and a one-time macOS guest setup
- –The isolated guest has separate apps, accounts, permissions, and files, keeping host credentials and sessions out of reach
- –Default guest networking can still access the host or local network, so hostile-code isolation is not yet the project’s strongest claim
DISCOVERED
1h ago
2026-11-03
PUBLISHED
1h ago
2026-11-03
RELEVANCE
AUTHOR
0x0SojalSec