Skip to main content
nono works with any CLI tool, but these guides walk through setup and best practices for popular AI coding agents.

​
Supported Clients

​
Quick Start

Every supported client has a profile available via the registry or as a preset. Use it with a single flag:
For example:

​
Using a Different Client?

nono is agent-agnostic. If your tool isn’t listed here, you can run it directly with capability flags:
Or create a custom profile. See Security Profiles for the profile format and how to create your own.

​
What the Sandbox Does

When you run a client through nono:
  1. Only the directories and files you grant are accessible
  2. Sensitive paths (~/.ssh, ~/.aws, etc.) are blocked by default
  3. Network can be allowed or blocked per-profile
  4. All child processes inherit the same restrictions
  5. The sandbox cannot be escaped at runtime - expansion requires explicit supervisor approval (Linux only)
See Security Model for full details.