by strongdm
Leash by StrongDM - take your AI agents for a walk
# Add to your Claude Code skills
git clone https://github.com/strongdm/leashLeash wraps AI coding agents in containers and monitors their activity. You define policies in Cedar; Leash enforces them instantly.

Recommended method is via npm:
npm install -g @strongdm/leash
Alternative ways follow:
Download the latest pre-built release binary from the releases page.
or if you're on macOS:
brew tap strongdm/tap
brew install --cask leash-app
macOS Note 1: This installs a helper app that enables experimental native mode on macOS and also installs the leash formula.
macOS Note 2: If you download Leash from the releases page, you'll need to run xattr -d com.apple.quarantine leash after extracting it
Refer to MACOS.md to learn more about the additional native macOS capabilities.
# Launch codex with the Control UI and pop open the web browser automatically
leash --open claude
leash --open codex
# Inspect available options
leash --help
AI agents claude, , , , and are shipped in the default image.
codexgeminiqwenopencodecoderOn first use Leash will prompt to mount the host's coder-agent config directory (for example ~/.claude) into the container.
Choose whether to remember that decision globally, for the current project, or just this once; persistent choices are stored at ~/.config/leash/config.toml.
Full monitoring captures every filesystem access and network connection initiated by the agent so Cedar policies and audit trails operate on complete telemetry.
Agent container runs your command with the current directory bind-mounted, so tools see the same file tree they would on the host.
Leash container monitors system calls, applies Cedar policies, and exposes the Control UI at http://localhost:18080 (use --open to launch it automatically).
Mount prompts remember whether to forward host agent credentials (see CONFIG.md).
Environment forwarding maps common API keys automatically: ANTHROPIC_API_KEY for claude, OPENAI_API_KEY for codex, GEMINI_API_KEY for gemini, and DASHSCOPE_API_KEY for qwen.
Leash includes a Model Context Protocol (MCP) observer that inspects, records, and enforces MCP tool calls made by the agent. Requests flowing through supported MCP transports are correlated with filesystem and network telemetry, enabling Cedar policies to govern tool use alongside core runtime activity.