nono

Nono wraps any AI agent or process in a kernel-isolated sandbox in seconds, providing capability-based isolation with secure key management, atomic rollback, and a cryptographic immutable audit chain of provenance. It allows running agents in a zero-trust environment without the need for a hypervisor or additional infrastructure.

{
  "mcpServers": {
    "nono": {
      "args": [
        "-y",
        "nono"
      ],
      "command": "npx"
    }
  }
}