Sandboxed dev container for running Claude Code in yolo mode: filtered egress, local-only git, taint detection, full audit trail
pacepace/aidc is an MCP server distributed on github, maintained by pacepace, tracked here since August 2026. It has shipped 12 releases and exposes 14 tools. Tools include audit_get, file_get, file_put, session_create, session_exec, session_invoke, and 8 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised 2 review prompts — dangerous code and exfiltration combo — each a pattern worth a human look rather than a finding of fault.
Since the previous scan on 2026-09-15: 2 tools removed.
full security breakdown →-
audit_get -
file_get -
file_put -
session_create -
session_exec -
session_invoke -
session_invoke_async -
session_list -
session_resend -
session_send -
session_status -
session_unwatch -
session_watch -
taint_mark
06-20 00:00 08-03 00:00 now
| version | date | src |
|---|---|---|
| v1.7.0 | 2026-09-17 | github |
| v1.6.0 | 2026-09-12 | github |
| v1.5.1 | 2026-09-11 | github |
| v1.5.0 | 2026-09-11 | github |
| v1.4.1 | 2026-09-11 | github |
| v1.4.0 | 2026-09-10 | github |
| v1.3.1 | 2026-09-10 | github |
| v1.3.0 | 2026-09-05 | github |
| v1.2.0 | 2026-09-05 | github |
| v1.1.1 | 2026-08-22 | github |