Isolated macOS Sandbox for Terminal AI Agents

The terminal-mac utility launches an isolated virtual macOS directly in the terminal on M-chip Macs for safe AI agent operations, with release v0.2.0-6 launching on November 3, 2026.

Compiled by Sergey KostenchukPublished 2026-11-04Updated 2026-11-04

2026-11-04 Coding Anthropic

🛠 Isolated macOS Sandbox for AI Agents

Terminal-mac boots a virtual macOS via Apple Virtualization and displays it in the terminal — Kitty, iTerm2, Ghostty. The agent controls the system via MCP tools: screenshot, click, type, key, and skill. Release v0.2.0-6 (early RC) launched on November 3, 2026; installation is a single curl command, requiring an M-chip Mac and macOS 14+.

🌍 Isolation in a virtual machine reduces the risk that an agent breaks the host system or gains access to other sessions. The Cua Driver reads the accessibility tree instead of coordinates from screenshots — the authors promise lower token consumption, but no quantitative comparisons are available.

👤 On an M-chip Mac, you can provide Claude Code, Codex, or Cursor with a separate virtual macOS with its own accounts. The project is in early RC: self-signed, no VM deletion command — keep critical data in backups.

Source 1: https://github.com/govijr/terminal-mac

Source 2: https://cua.ai/cua-driver

Sources