SPACE

Microsandbox is a local-first microVM runtime and library for running untrusted workloads, including AI-agent tasks, user code, plugins, CI jobs, development environments, scrapers, and automation. It uses hardware-level isolation and runs standard OCI container images from registries such as Docker Hub and GHCR, with Docker-like image, command, shell, and volume workflows. The project provides SDKs for TypeScript, Rust, Python, Go, and Ruby, along with a CLI for booting and controlling sandboxes. Applications can create microVMs as child processes without a setup server or long-running daemon; sandboxes can also run detached for long-lived sessions. Agent Skills and an MCP server support agent-created sandboxes, and the project documents secret handling intended to keep keys out of the VM. It runs on Linux, macOS, and Windows, with platform-specific virtualization requirements, and is described as beta software.

Cloudflare Computer is an open-source library that provides AI agents with a virtual filesystem backed by a Cloudflare Durable Object. The Durable Object stores the authoritative state in SQLite, while the workspace exposes a single execution interface through `workspace.runtime.exec(source, { backend })`. It supports three execution backends: Container projects the SQLite state into a sandbox container through a FUSE mount and synchronizes changes over capnweb RPC; Isolate shell runs `just-bash` in a Dynamic Worker; and Isolate JavaScript runs an ECMAScript module in a fresh Dynamic Worker with structured inputs and results, durable relative imports, configured libraries, workspace-backed `node:fs/promises`, and trusted `ws:git` and `ws:artifacts` modules. Workspaces can register multiple backends under stable identifiers, connect to them lazily, or be used solely as a filesystem without an execution backend. The repository includes examples for container, Worker shell, Worker JavaScript, egress policies, MCP, agent workspaces, tutorials, artifacts, and assets. The package is marked preview-only: its APIs are unstable and the repository says it is intended for experiments, exploration, and prototypes rather than production use.

Docker Sandboxes is a Docker-developed proprietary tool for running AI coding agents and other workloads inside isolated microVMs on a local machine or Docker-managed cloud infrastructure. Each sandbox has its own kernel and filesystem, controls access to the host filesystem, network, and tools, provides a private Docker daemon for test containers, uses secret placeholders, blocks network access by default, and records an audit trail. It supports agents including Claude Code, Codex, Gemini CLI, and OpenCode, with configurable network and filesystem rules, read-only mounts, MCP catalogs, and policy-based governance controls. It is distributed as the `sbx` command-line tool for macOS, Windows, and Linux, with stable, release-candidate, and nightly builds.

Cloudflare OS is an open-source AI productivity environment developed by Cloudflare and built on Cloudflare Workers. It provides an agent chat interface preloaded with company-specific knowledge, sandboxed development of shareable applications called gadgets, and a security framework called Gatekeepers for controlling agents and apps. It is intended to be customized into an organization's own company operating environment rather than adopted unchanged as a traditional computer operating system. Each user receives a private, separately sandboxed instance of a productivity application, such as a slide-deck tool, whiteboard, game, or dashboard. Agents can create and modify these gadgets and perform tasks involving configured company systems and integrations. Gatekeepers are service-specific Workers that expose a Cap'n Web API, handle authorization such as OAuth, restrict access to the intended resource, log gadget and agent actions, and support human approval for side effects. Instead of stopping synchronously for approval, a Gatekeeper can simulate the outcome locally, let the agent continue and queue actions, then allow the user to approve or reject those actions later in bulk or individually. The full stack can be run locally with pnpm, Wrangler, and workerd using `pnpm run-local`, or deployed to a Cloudflare account. The repository describes the project as an early-access release under heavy development; the local setup is intended for evaluation rather than production use.

E2B is open-source cloud sandbox infrastructure for securely running AI-generated or user-specific code, tools, and agents in isolated environments. Sandboxes can be started and controlled through JavaScript/TypeScript or Python SDKs, supporting command execution, code interpretation, desktop interaction, sandbox templates, and snapshots that preserve a running environment's filesystem and memory for pausing and resuming. The platform manages sandbox lifetimes, idle timeouts, workspace assignment, runtime filesystem writes, storage, orchestration, and network restrictions. It can be self-hosted using Embed deployment and Terraform on AWS, Google Cloud, Azure, or a general Linux machine.