microsandbox

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

microsandbox is ranked #2 of 22 in sandbox software on Inferse. It runs on API, Linux, macOS, Self-hosted, Windows. There is a free plan. Paid plans start at $49/mo.

Compared on sandbox software

Free plan: Yesmicrosandbox.dev
Paid from: $49/momicrosandbox.dev
Concurrent environments: 1,000 environmentsmicrosandbox.dev
Persistent storage: Yesmicrosandbox.dev
Network controls: Yesmicrosandbox.dev
API or CLI access: Yesmicrosandbox.dev
Deployment: bothmicrosandbox.dev

Facts

What it does: Microsandbox is a local-first microVM runtime for running untrusted workloads, including AI agents, user code, plugins, CI jobs, scrapers, and automation.docs.microsandbox.dev · 30 Sept 2026
Isolation: Each sandbox is a microVM with its own Linux kernel, filesystem, and network boundary, rather than a container sharing the host kernel.docs.microsandbox.dev · 30 Sept 2026
Local runtime: The local runtime starts on the user's machine without a daemon, root service, or account.microsandbox.dev · 30 Sept 2026
Cloud availability: Microsandbox Cloud is in private beta and requires users to request access.docs.microsandbox.dev · 30 Sept 2026
Self-hosting: The runtime can be run on the user's own servers or clusters, and the cloud platform can be deployed in the user's infrastructure.docs.microsandbox.dev · 30 Sept 2026
Integrations and languages: The product supports SDKs for TypeScript, Rust, Python, Go, and Ruby, plus a CLI and MCP workflows.microsandbox.dev · 30 Sept 2026
Images: The runtime accepts OCI images from Docker Hub, GHCR, ECR, GCR, or another registry.docs.microsandbox.dev · 30 Sept 2026
Network controls: By default, sandboxes can reach the public internet while private, host-local, link-local, and metadata destinations are blocked; egress can be allowlisted or disabled.microsandbox.dev · 30 Sept 2026
Credential handling: Bound secrets are represented by placeholders inside the sandbox and substituted host-side for supported intercepted requests to approved destinations.microsandbox.dev · 30 Sept 2026
Credential limitation: Secret substitution requires intercepted TLS by default, and body substitution is opt-in with format and size limits.microsandbox.dev · 30 Sept 2026
Snapshots: Local full snapshots can preserve disk, memory, and running processes; managed cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore.microsandbox.dev · 30 Sept 2026
Support: The product FAQ directs users with questions to its Discord community.microsandbox.dev · 30 Sept 2026
License: The runtime is open source under the Apache 2.0 license.microsandbox.dev · 30 Sept 2026
Company: Microsandbox is designed and engineered by Super Rad Company, whose stated purpose is building tools for the agentic future.superrad.company · 30 Sept 2026