Claude Managed Agents

​

Install

uv add 'mirage-ai[claude-managed-agents]'

​

Run a worker

docker run -d -p 6379:6379 redis
uv add 'mirage-ai[redis]'

import asyncio
import os

from anthropic import AsyncAnthropic

from mirage import MountMode, Workspace
from mirage.agents.claude_managed_agents import mirage_tools
from mirage.vfs.ram import RAMVFS
from mirage.vfs.redis import RedisVFS

ws = Workspace(
    {"/workspace": RAMVFS(), "/redis": RedisVFS(url="redis://localhost:6379/0")},
    mode=MountMode.WRITE,
)

worker = AsyncAnthropic().beta.environments.work.worker(
    environment_id=os.environ["ANTHROPIC_ENVIRONMENT_ID"],
    environment_key=os.environ["ANTHROPIC_ENVIRONMENT_KEY"],
    tools=mirage_tools(ws),
)
asyncio.run(worker.run())

​

How it behaves

• The tools keep the toolset’s names. One the session’s profile would always refuse is left out: a read-only workspace gets no write or edit.
• bash runs Mirage’s shell, so a line sees the workspace’s mounts and commands, not the worker’s machine. A restart is refused, since the session keeps its directory and variables. A relative path resolves against the session’s working directory, which cd moves.
• write overwrites a file only after the agent read all of it, and write and edit refuse a file that changed since the agent read it. stale_write_protection=False turns that off.
• session_id= runs the tools as another session, with its profile.
• web_search and web_fetch still run on Anthropic’s servers. Turn them off in the agent’s toolset to keep the agent to the workspace.

​

Example