How do you run AI coding agents safely on your own server?
Answer
Give the agent its own machine. I set up a dedicated Linux VPS as a 'werkplaats' for Claude Code, rather than letting an agent with real tools loose on a server that matters. Access to tools is the whole point, an agent that can look things up, compile and test its own work is far more useful than a chat window, but the blast radius has to stay inside a box you can rebuild. The ordinary server hardening basics still apply, and backups are rotated offsite.