I wrote https://github.com/kstenerud/yoloai to sandbox agents so that they can do whatever they want inside (with --dangerously-skip-permissions), including write, compile and run code to perform their tasks. It also supports MCP forwarding.

Still early beta, but the biggest pieces are in place.