ShareBox Lets AI Agents Publish Small Web Tools with Self-Hosted Isolation

Summary

ShareBox is a self-hosted platform that lets AI agents publish small web tools with a single command or through its bundled MCP server. Each published tool receives its own HTTPS address, and republishing keeps the same tool’s data. Owners can share tools with selected email addresses, an entire Google Workspace domain, or anyone with the link, with separate use and management permissions; revocations take effect on the next request. Google sign-in is handled by the platform, which passes each visitor’s name, email, and role to the tool. Every tool has an isolated SQLite database, while server-side code can use direct SQL and static pages can use ShareBox’s SDK. Execution is isolated with gVisor and workerd, per-tool networks, read-only code, and CPU, memory, and process limits. A gateway checks sessions and permissions before forwarding requests, and tools cannot access one another, the host, the platform, or the internet. ShareBox runs on the operator’s own Linux server and includes a dashboard, logs, activity controls, suspension, deletion, and optional encrypted Google Drive backups. The installer targets Ubuntu 24.04 with 2 GB of RAM to start, and the project estimates about 25 concurrent tools on that configuration. The young project currently supports Google-only sign-in and blocks external API access; egress through a proxy and idle-tool stopping are planned. It is released under AGPL v3 or later.