Matchlock is a command-line tool that runs AI agents in isolated microVMs, ensuring your secrets never enter the virtual machine. It allows for network allowlisting and secret injection, providing a full Linux environment while keeping your main system safe. You can manage sandboxes easily and integrate it with Go and Python SDKs.