lea · Help

FAQ

Is lea a replacement for Claude Code? No. lea runs the real Claude Code, with your own configuration, and gives it a safe place to run and a deck to run several at once.

Why not --dangerously-skip-permissions on the host? On the host that flag hands an agent everything your user can reach. In lea an agent can go just as fast, but what it can reach is fixed by the container and the proxy.

How is lea different from a devcontainer? A devcontainer isolates a toolchain; lea isolates the agent: an egress proxy that refuses private networks, no credentials, a nested container engine, an audit of risky changes on exit, and a deck for many agents.

Does my code leave my machine? Only the way Claude Code already sends it, to the Claude API. lea has no server and no account, and sends no telemetry of its own; Claude Code's usage metrics go nowhere unless you set LEA_OTEL_UPSTREAM.

Can an agent reach a service on my LAN? Not by default. List the hosts it may reach in LEA_INTERNAL_HOSTS (format in config/internal-hosts).