Multitui
Shares rank 9 of 10 sandboxing tools by recommenders
Runs Claude, Codex, Gemini or other terminal tools inside a macOS sandbox without containers, with a UI for adding file access rules.
Runs Claude, Codex, Gemini or other terminal tools inside a macOS sandbox without containers, with a UI for adding file access rules.
7 people gave an opinion
- recommend it
- 7
- criticize it
- 0
- approval share
- 100%
Recommended in 3 of 13 months
- November 2025: not recommended
- December 2025: not recommended
- January 2026: not recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 7 people recommend itNeeds 10 or more, not met.
- Nobody criticizes itNeeds 2 to 1 or better, met.
- Recommended in 3 of 13 monthsNeeds 4 or more, not met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Praised as useful and well made
“this is definitely a useful tool, I'll happily use that in the future”
Comment from 9 Mar 2026 in “Ask HN: What Are You Working On? (March 2026)” “This looks really cool and genuinely useful”
Comment from 2 Feb 2026 in “Show HN: Multitui – sandbox claude, codex, or any TUI with custom macOS apps” “I’m impressed really neat work!”
Comment from 21 Feb 2026 in “macOS's Little-Known Command-Line Sandboxing Tool” - Comment from 2 Feb 2026 in “The Codex App”
- Comment from 21 Feb 2026 in “macOS's Little-Known Command-Line Sandboxing Tool”
Sandboxes AI coding agents on macOS
“You can block file access on macOS by running codex in a sandbox with my app”
Comment from 28 Jun 2026 in “A way to exclude sensitive files issue still open for OpenAI Codex” “My app does this on macOS!”
Comment from 3 Feb 2026 in “Sandboxing AI Agents in Linux”
Other sandboxing tools people recommend
The four most recommended other sandboxing tools, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Bubblewrap (bwrap) | 109 | 32 | 77% | 12 | — | Approved |
| Agent Safehouse | 43 | 2 | 96% | 7 | — | Approved |
| nono | 34 | 3 | 92% | 10 | — | Approved |
| Firejail | 30 | 6 | 83% | 12 | — | Approved |
| MultituiThis page | 7 | 0 | 100% | 3 | — | — |
What people said
9 of the 10 comments that mention it, newest first. Each links to the original comment.
“You can block file access on macOS by running codex in a sandbox with my app”
“this is definitely a useful tool, I'll happily use that in the future”
“It's highly customizable.”
“Wow, this looks very nice.”
“I’m impressed really neat work!”
“it monitors what is blocked and gives you a way to add a read/write rule from the UI”
“My app does this on macOS!”
“This is a really nice tool!”
“This looks really cool and genuinely useful”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.