Local Command Sandbox and Local Autonomous Mode

This release makes the local command sandbox and local autonomous mode available to every V3 user. It also loads MCP tools on demand, extends KIRO_HOME across V3 configuration and state, and fixes image, service, MCP, cloud-session, and sign-in issues.

Run /sandbox to place agent shell commands and their child processes inside an operating-system sandbox. Choose whether outbound network access is blocked, limited to common development hosts, or open. You can also run local stdio MCP servers inside the same sandbox.

The agent, built-in file tools, and remote MCP servers stay outside the sandbox. Permission rules still govern agent actions. The sandbox reduces risk but cannot guarantee complete isolation, so keep reviewing proposed commands. Learn more ->

Run /autonomous on in a local V3 session when you want Kiro to work through a task without asking you to approve each shell command. Kiro switches to the Default agent and turns on the local command sandbox first. Learn more ->