---
slug: "nono"
name: "nono"
effect: "Runs coding agents in a least-privilege sandbox with per-tool filesystem, network and credential rules"
category: "sandbox"
tier: "rising"
url: "https://nono.sh"
github: "nolabs-ai/nono"
pricing: "open-source"
license: "Apache-2.0"
tags: ["sandbox", "least-privilege", "credentials", "policy", "cli"]
platforms: ["claude-code", "codex", "macos", "linux", "windows"]
install_kind: "cli"
date_added: "2026-10-15"
rank: 14
rising_score: 47
stars: 4504
star_velocity: 17.5
velocity_basis: "since creation"
created_at: "2026-01-31T09:25:45Z"
pushed_at: "2026-10-14T15:26:06Z"
signals_status: "ok"
signals_fetched_at: "2026-10-15T05:02:33.778Z"
page: "https://agenttooldrop.com/tools/nono"
---

# nono

Runs coding agents in a least-privilege sandbox with per-tool filesystem, network and credential rules

Category: Sandboxes. Tier: new and rising, rank 14 by new and rising score (47 of 100). Pricing: Open source. License: Apache-2.0.

Platforms: claude-code, codex, macos, linux, windows.

## Why you would want it

nono wraps an agent such as Claude Code, Codex or Pi in a sandbox with no daemon, container or VM, and shows the exact filesystem, network and credential access before applying it. Profiles for common agents are pulled from the nono registry and can be extended into an editable JSON profile. Tools the agent calls, such as git, gh, curl or kubectl, can run in their own command sandboxes with separate filesystem and network policy, and credentials reach them through a proxy that can filter by HTTP method and path.

## Best for

- Sandboxing Claude Code, Codex or Pi locally
- Scoping credentials to one tool
- Sharing reviewed agent profiles with a team

## Use it when

You want to run a coding agent on your own machine with explicit filesystem, network and credential limits, without setting up containers or VMs.

## Skip it if

You want VM or container isolation; the README says nono runs with no daemon, container or VM. APIs may still change before 1.0, and Windows is supported through WSL2. It runs agent commands and brokers credentials, so review a profile's grants before pulling it from the registry.

## Editor note

Other install routes (install script, Nix, Debian, Fedora, Arch) are listed in the README and at nono.sh/docs.

## Install

Install with Homebrew:

```sh
brew install nono
```

Source: https://github.com/nolabs-ai/nono#quickstart

## Live signals

Fetched 2026-10-15T05:02:33.778Z (status: ok).

- Repository: nolabs-ai/nono
- Repository created: 2026-01-31
- Stars: 4,504 (GitHub's count; it cannot be authenticated)
- Stars per day, since repo creation: 17.5 (an average over the repo's life, not a growth rate)
- Forks: 303
- Open issues and PRs: 247
- License (GitHub): Apache-2.0
- Last push: 2026-10-14
- Latest release: v0.80.0 (2026-10-13)

## Links

- Website: https://nono.sh
- GitHub: https://github.com/nolabs-ai/nono
- Install instructions verified at: https://github.com/nolabs-ai/nono#quickstart
- Source for this entry: https://github.com/nolabs-ai/nono#readme
- AgentToolDrop page: https://agenttooldrop.com/tools/nono
- Full catalog (JSON): https://agenttooldrop.com/tools.json