Sign inSign up

yadayac/reshapr-kit

By yadayac

•Updated about 21 hours ago

Docker Sandboxes kit: give an agent governed access to a local reShapr MCP server, key kept on host

Sandbox Kit
Machine learning & AI
Developer tools
0

124

yadayac/reshapr-kit repository overview

Digest

sha256:1aa881553147…

Size

2.4 kB

Schema

v3

Pushed

about 21 hours ago

Specificationspec.yaml
MIXIN

Registers a reShapr MCP exposition running on the host with the agent. The exposition API key stays on the host; the sandbox proxy injects it.

Arguments
NameRequiredDefaultDescription
expositionOptionalreshapr/open-meteo-weather-forecast-api-1-0-default

<organization>/<exposition-name> path of the exposition (see `reshapr expo list`).

portOptional7777

Host port of the reShapr server.

CapabilitiesExpand a row to see its full configuration. See the full spec for the complete descriptor.
TypeRequiredDescription
com.docker.sandbox/network-policy@1Required—
com.docker.sandbox/credential@1OptionalAPI key of the reShapr Configuration Plan. Store it with `sbx secret set reshapr`.
com.docker.sandbox/lifecycle@1Required—
com.docker.sandbox/agent-context@1Required—

Apply this mixin to a sandbox

sbx run <agent> --kit yadayac/reshapr-kit:0.2.0

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠

⁠reShapr kit for Docker Sandboxes

A Docker Sandboxes (sbx) mixin kit (spec v3) that connects a sandboxed coding agent (Claude Code, Codex, or GitHub Copilot CLI) to an MCP server exposed by reShapr⁠, running on your host.

The agent talks only to reShapr, which governs access to your backend APIs. The reShapr API key never enters the sandbox: the sbx proxy injects it into requests, so the sandbox only holds a placeholder.

⁠What the kit does

  • Registers the reShapr MCP server with the agent (Claude, Codex, or Copilot) at sandbox creation.
  • Allows egress only to the reShapr port (localhost:7777 by default).
  • Injects the x-reshapr-key header through the sbx credential proxy.
  • Adds a short agent-context note so the agent prefers reShapr tools over direct API calls.

⁠Use it

Start reShapr on the host and store its API key before creating the sandbox:

sbx secret set reshapr            # paste the exposition API key
sbx create docker.io/docker/sbx-kit-claude:2.1.296 --name reshapr-sbx \
  --kit docker.io/yadayac/reshapr-kit:0.2.0

Other workloads: docker.io/docker/sbx-kit-codex:0.162.1 and docker.io/docker/sbx-kit-copilot:1.0.86 (Copilot also needs the github and copilot secrets).

Prefer no kit? The sbx MCP gateway works too; see the README⁠.

⁠Arguments

ArgDefaultMeaning
port7777Host port of the reShapr server
expositionreshapr/open-meteo-weather-forecast-api-1-0-default<organization>/<exposition-name> path

Override them at creation with --kit-arg:

sbx create docker.io/docker/sbx-kit-claude:2.1.296 --name reshapr-sbx \
  --kit docker.io/yadayac/reshapr-kit:0.2.0 \
  --kit-arg reshapr-kit.port=7778

⁠Requirements

  • Docker Sandboxes (sbx) 0.48.0 or later (kit spec v3).
  • A reShapr server on the host with an API-key-protected exposition.

⁠Tags

0.2.0: spec v3. The legacy spec v2 kit is the v0.1.0-v2 release on GitHub. Pin by digest if you need immutability: docker.io/yadayac/reshapr-kit@sha256:1aa881553147fd5dc91e1e43b64b9964899470531d293481138dffc6abaeb7e1

⁠Source and docs

⁠License

Apache-2.0