Claude-Cage
Runs Claude Code in an isolated VM with its own proxy and fingerprint, apart from your host.
Claude Cage runs a macOS, Windows or Linux virtual machine dedicated to using Claude, with its own proxy, timezone and language fingerprint kept separate from the host, and only the default workspace and explicitly opened project folders are shared, so the host's Claude login, browser profiles and SSH keys aren't pulled in automatically. It can deploy to your own Linux VPS over SSH or join a Tailscale network, and it pauses outbound access when its own network or isolation checks fail. It says outright these checks can't guarantee a platform won't restrict an account, and aren't a substitute for a full virtualization security audit.
What holds up
- +Isolates network, timezone and language fingerprint from the host — the VM has its own identity.
- +Only shares the default workspace and opened project folders — host Claude login and SSH keys stay out.
- +Pauses outbound network access automatically when its own isolation checks fail, instead of proceeding anyway.
- +Can deploy to a Linux VPS over SSH, so the environment and data can live off the local machine.
Mind the limits
- −States outright that its checks can't guarantee a platform won't restrict an account.
- −No direct host or LAN connections and limited UDP/IPv6 by default, unless Tailscale is added.
- −File changes and git operations in shared projects affect the real files directly, so backups are on you.
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/claude-cage/"><img src="https://stillworks.dev/badge/claude-cage.svg" alt="Picked by StillWorks" width="230" height="54"></a>