sbx CLI reference

sbx is Docker's command-line tool for building containers used as sandboxes for AI agents. It is presented as part of Docker's sandboxing approach for controlling what agents can access while they run, and can be installed with Homebrew.

Docker Sandboxes is a Docker-developed proprietary tool for running AI coding agents and other workloads inside isolated microVMs on a local machine or Docker-managed cloud infrastructure. Each sandbox has its own kernel and filesystem, controls access to the host filesystem, network, and tools, provides a private Docker daemon for test containers, uses secret placeholders, blocks network access by default, and records an audit trail. It supports agents including Claude Code, Codex, Gemini CLI, and OpenCode, with configurable network and filesystem rules, read-only mounts, MCP catalogs, and policy-based governance controls. It is distributed as the `sbx` command-line tool for macOS, Windows, and Linux, with stable, release-candidate, and nightly builds.

Blaxel is an infrastructure platform for autonomous AI agents that provides isolated microVMs (which boot in milliseconds and resume in ~25ms), persistent shared memory, and programmable networking to run, connect, and operate agents at scale. It offers a distributed shared-storage feature (presented in videos as "Agent Drive") that can be mounted as a POSIX-style drive so agents in separate sandboxes can share files, cache dependencies, exchange context/memory, and coordinate parallel work in real time.

Microsandbox is a local-first microVM runtime and library for running untrusted workloads, including AI-agent tasks, user code, plugins, CI jobs, development environments, scrapers, and automation. It uses hardware-level isolation and runs standard OCI container images from registries such as Docker Hub and GHCR, with Docker-like image, command, shell, and volume workflows. The project provides SDKs for TypeScript, Rust, Python, Go, and Ruby, along with a CLI for booting and controlling sandboxes. Applications can create microVMs as child processes without a setup server or long-running daemon; sandboxes can also run detached for long-lived sessions. Agent Skills and an MCP server support agent-created sandboxes, and the project documents secret handling intended to keep keys out of the VM. It runs on Linux, macOS, and Windows, with platform-specific virtualization requirements, and is described as beta software.