sbx

The sbx CLI reference is Docker's documentation for the command-line tool used to build and run containerized sandboxes for AI agents. The tool supports sandboxing agents so their tools, context, credentials, and access to external systems can be separated according to a task's intent.

Docker Sandboxes is a Docker-developed proprietary tool for running AI coding agents and other workloads inside isolated microVMs on a local machine or Docker-managed cloud infrastructure. Each sandbox has its own kernel and filesystem, controls access to the host filesystem, network, and tools, provides a private Docker daemon for test containers, uses secret placeholders, blocks network access by default, and records an audit trail. It supports agents including Claude Code, Codex, Gemini CLI, and OpenCode, with configurable network and filesystem rules, read-only mounts, MCP catalogs, and policy-based governance controls. It is distributed as the `sbx` command-line tool for macOS, Windows, and Linux, with stable, release-candidate, and nightly builds.

DBX is an open-source, cross-platform database client developed in the t8y2/dbx project. It provides desktop, web, Docker, and CLI distributions for connecting to more than 100 databases and related systems, including MySQL, PostgreSQL, SQLite, Redis, MongoDB, DuckDB, SQL Server, message queues, and service registries. The desktop application uses Tauri, Vue, TypeScript, and Rust and is distributed as a small native binary without a bundled Java runtime, Python environment, or Chromium. Its query editor uses CodeMirror 6 with SQL completion, formatting, diagnostics, history, saved snippets, and file execution. Schema and data tools include object browsing, table editing, ER diagrams, schema comparison, explain plans, field lineage, imports, database transfers, exports, data comparison, and previews of Parquet, CSV, and JSON files through DuckDB. Specialized interfaces support Redis and MongoDB, while consoles cover Kafka, RocketMQ, RabbitMQ, Pulsar, MQTT, Nacos, Consul, ZooKeeper, and etcd. DBX includes an AI SQL assistant that converts natural-language requests into SQL, explains and optimizes queries, fixes errors, and checks generated SQL before execution. It supports Claude, OpenAI, local Ollama models, and OpenAI-compatible endpoints. A separately distributed Rust MCP server lets compatible coding agents such as Claude Code, Cursor, and Windsurf list connections, browse tables, execute SQL, and open tables in DBX; access can be restricted to read-only, safe-write, or high-risk-write modes. The project also provides a CLI for terminal and agent workflows, a signed and sandboxed plugin system with Go and TypeScript SDKs, encrypted credential storage, SSH tunnels, and Docker-based self-hosting. It is licensed under Apache-2.0.

Kubernetes-sigs Agent Sandbox creates isolated, disposable environments for running untrusted or agent-generated code. It is intended to separate such code execution from other workloads.