Sandboxes & code execution AI agent tools
22 sandboxes & code execution tools in the AgentScout directory, each with a link-checked listing. Isolated sandboxes, microVMs and code-execution runtimes where agents can run generated code, shell commands and files without touching your machine: E2B, Modal, microsandbox, forkd, Judge0, Cloudflare Sandbox SDK and more.
Updated
There are 22 sandboxes & code execution tools: 19 open source, 1 free or freemium, 2 paid, usage-based or enterprise.
Quick comparison Top 10 of 22 listed below. Pricing as the maker states it; blank means we don't have it.
| Tool | Pricing | Best for | Open source |
|---|---|---|---|
 Sandbox0 | Paid | Run code safely | |
 agentOS | Open source + cloud | Run code safely | Yes |
 Agent Sandbox (Kubernetes) | Open source | Run code safely | Yes |
 AgentBay | Usage-based | Run code safely | |
 Zeroboot | Open source + cloud | Write code | Yes |
 AIO Sandbox | Open source | Write code | Yes |
 forkd | Open source | Write code | Yes |
 Agent Safehouse | Open source | Write code | Yes |
 Cloudflare Sandbox SDK | Open source + cloud | Write code | Yes |
 Tensorlake | Open source + cloud | Write code | Yes |
Tasks in this category
Showing 22 of 22 tools
Sandbox0
Sandbox0 is a managed sandbox runtime that gives each AI agent an isolated cloud computer where it can run code, install software, manage files and control network access. The whole writable root filesystem persists across incremental checkpoints and grows automatically as it fills, so an agent can pause compute between tasks and resume the same sandbox later with its tools, dependencies and files intact. It adds snapshots and restore, SSH, egress proxy and credential injection, private previews, Docker in the sandbox, webhooks, warm pools and custom templates, with integrations for LangChain Deep Agents, OpenAI Agents, Vercel and GitHub CI. Sandboxes run under gVisor isolation with Nomad scheduling.
Added
agentOS
A lightweight operating system for agents from Rivet that runs coding agents and their tools inside fast WebAssembly sandboxes with a file system, processes and networking, so you can spin up thousands cheaply.
Added
Agent Sandbox (Kubernetes)
A Kubernetes project that adds a Sandbox resource for running isolated, stateful agent workloads such as code execution and browsers, with warm pools and fast startup on your own cluster.
Added
AgentBay
Alibaba Cloud's cloud sandbox service for agents, offering ready-made browser, Linux and Windows desktop, mobile and code environments that agents control through an SDK or MCP.
Added
Zeroboot
VM sandboxes for running agent code that start in under a millisecond by forking a warm snapshot with copy-on-write memory.
Added
AIO Sandbox
All-in-one Docker sandbox for AI agents that combines a browser, shell, files, MCP, VS Code Server and Jupyter in one container.
Added
forkd
MicroVM sandbox runtime for AI agent fan-out that forks KVM-isolated child VMs from a warm snapshot in milliseconds.
Added
Agent Safehouse
macOS sandbox for local coding agents that limits file and integration access with deny-first policy profiles.
Added
Cloudflare Sandbox SDK
SDK for running isolated code sandboxes on Cloudflare's network, so agents can execute commands and files safely from a Worker.
Added
Tensorlake
Serverless runtime that gives agents MicroVM sandboxes and durable orchestration for long-running background jobs.
Added
Perplexity SPACE
Perplexity's open-source sandbox platform that runs each agent task in its own Firecracker microVM, with credentials and network access controlled from outside.
Added
NVIDIA OpenShell
Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.
Added
E2B
Secure cloud sandboxes for running agent-generated code.
Added
Modal
Serverless compute and sandboxes for AI workloads.
Added
OpenSandbox
Secure, fast sandbox runtime for AI agents to run code.
Added
CubeSandbox
Lightweight, concurrent sandbox for running AI agent code securely.
Added
microsandbox
Local-first microVM runtime for running untrusted agent code safely.
Added
smolvm
Portable, branchable virtual machine for running agents safely on your computer.
Added
nono
Zero-trust sandboxing for agent runtimes.
Added
Judge0
Sandboxed code execution system for running untrusted code from people and AI.
Added
ArcBox
Runs AI agents on isolated machines with their own kernel, filesystem and network.
Added
BoxLite
Embeddable micro-VM for running AI agents.
Added
Top sandboxes & code execution repos on GitHub (19)
| Repo | GitHub stars | Licence | Last push |
|---|---|---|---|
| NVIDIA OpenShell ↗ | 16,156 | Apache License 2.0 | 2026-10-21 |
| OpenSandbox ↗ | 15,907 | Apache License 2.0 | 2026-10-21 |
| CubeSandbox ↗ | 12,960 | Apache-2.0 (third-party components under their own licences) | 2026-10-21 |
| microsandbox ↗ | 8,717 | Apache License 2.0 | 2026-10-19 |
| smolvm ↗ | 6,746 | Apache License 2.0 | 2026-10-21 |
| AIO Sandbox ↗ | 6,205 | Apache License 2.0 | 2026-09-14 |
| agentOS ↗ | 4,808 | — | 2026-10-21 |
| nono ↗ | 4,535 | Apache License 2.0 | 2026-10-21 |
| Judge0 ↗ | 4,482 | GNU GPL v3.0 | 2026-10-18 |
| Agent Sandbox (Kubernetes) ↗ | 4,328 | — | 2026-10-20 |
| ArcBox ↗ | 4,240 | Apache License 2.0 | 2026-10-20 |
| forkd ↗ | 2,919 | — | 2026-09-14 |
| BoxLite ↗ | 2,520 | Apache License 2.0 | 2026-10-21 |
| Zeroboot ↗ | 2,465 | — | 2026-10-18 |
| Agent Safehouse ↗ | 2,110 | — | 2026-10-19 |
Top 15 of 19 by stars. Stars and licence come from each repo, checked when the listing was last verified.
All categories
Related searches
Who uses these
Best-of lists
Task guides
Facts come from our directory listings; pricing is as each maker states it. Check official sites before you choose.