← Discover
Discover · GitHub · MXC↑ +64 today

Policy-based layered system isolation with Rust

Developed by Microsoft, MXC is a policy-based, layered isolation and containment solution written in Rust language. It is designed to safely limit system resources and increase application security.

What you get

  • Runs untrusted code safely in isolated environments.
  • Controls file, network and interface access with JSON-based policies.
  • It offers multiple isolation backends on Windows, Linux, and macOS.

Installation

Compiling on Linux
./build.sh
Build on macOS
./build-mac.sh

Running it

Running with native binary
wxc-exec.exe config.json

If you don't write code

🤖 Paste this into your AI agent (Claude Code · Codex · Antigravity)

I want to run an untrusted code snippet in an isolated container using the MXC tool developed by Microsoft. According to the documentation in the project's GitHub repository, I need to prepare a JSON-based configuration file and use the binary appropriate for my platform. Can you create a sample JSON configuration file for me that will allow me to run a Python script with restricted file system and network access, and explain step by step how to run this configuration with wxc-exec.exe?

Related dictionary terms

RustArtificial Intelligence
Who it is forFor developers who want to run untrusted code, plugins, or tools in an isolated environment while preserving system resources.
LicenseMIT

Links

TreScout did not build this tool · we found it in GitHub trends and wrote it up. This page describes the repository as of 2026-06-07: The star count and our text belong to that day, the repository may have changed since. Check the repository link for the current state. This page was machine-translated from the Turkish original · the Turkish version prevails.