Run sandboxed Claude Code fleet sharing files via MCP

Tools

Claude Code

Overview

Couldn't agree more.

Workflow

The author runs a fleet of sandboxed Claude Code instances that share files via a custom MCP virtual filesystem (agentfiles://). An outer orchestrator intercepts MCP requests to perform actual AWS file operations, keeping access keys hidden from the agents. This setup allows agents to interact with a unified file view while remaining fully compartmentalized.

Reported result

The author reports that LLMs adapt well to the arbitrary filesystem and that the setup enables full auditing via tool request logs. No quantitative metrics, performance benchmarks, or specific business outcomes are provided in the source text.

Human role

The original post does not say how a person stayed involved.

Limitations

Prerequisites include building a custom MCP server and an orchestrator to handle AWS interactions. The source does not specify costs, latency impacts, or failure modes. Human involvement is not described, implying the orchestrator handles permissions automatically.

Try it

Act as an AI engineer implementing a secure file-sharing layer for Claude Code agents. 1. **Context**: I need to allow multiple sandboxed Claude Code instances to share files without exposing AWS credentials to the agents. 2. **Inputs**: [AWS S3 Bucket Name], [Virtual Filesystem URI Scheme, e.g., agentfiles://], [List of Agent IDs]. 3. **Task**: - Design a custom MCP server that exposes `list`, `upload`, and `download` tools mapped to the virtual URI scheme. - Write a Python orchestrator script that intercepts these MCP calls, validates permissions, and executes the actual S3 operations using secure credentials. - Ensure the Claude Code instances only see the virtual filesystem and never the underlying AWS keys. 4. **Output**: Provide the MCP server code, the orchestrator logic, and a configuration guide for Claude Code. 5. **Verification**: Before finalizing, run a dry-run simulation with a dummy file to confirm the agent can 'see' the file but cannot access the raw S3 path. Ask me to confirm the security model before generating the final deployment scripts.

More cases · Software & development

• Update a code base with Copilot chat and agent mode
• Check code against user intent with review agents and tests
• Build a budgeting app from a single prompt
• Build a mental models framework with a multi-agent dev team
• Build a instant-opening markdown viewer for macOS