OpenSandbox

Active
GitHub Go Apache-2.0

Description

OpenSandbox is an open-source, secure, fast, and extensible sandbox runtime for AI agents, developed by Alibaba.

Key Features

  • Multi-language SDKs: Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go with unified sandbox APIs
  • Docker and Kubernetes runtimes: built-in lifecycle management for both local development and large-scale distributed scheduling
  • Strong isolation: supports gVisor, Kata Containers, and Firecracker microVM secure container runtimes
  • Sandbox environments: built-in Command, Filesystem, and Code Interpreter with examples for coding agents, browser automation, and desktop environments
  • Network policy: unified Ingress Gateway with routing strategies plus per-sandbox egress controls
  • MCP server: exposes sandbox operations to MCP-capable clients like Claude Code and Cursor for direct agent integration

Use Cases

💡 Secure sandboxed execution for coding agents like Claude Code with full file and command isolation
💡 Agent evaluation benchmarks with reproducible sandbox environments at scale on Kubernetes
💡 AI code execution platforms requiring multi-tenant isolation and network policy controls
💡 Reinforcement learning training workloads with isolated compute environments

Strengths & Limitations

Strengths

  • Actively maintained, recent updates
  • High community interest (14.9k stars)
  • Permissive open-source license (Apache-2.0)

Quick Start

Install via `pip install opensandbox`, initialize config with `uvx opensandbox-server init-config ~/.sandbox.toml --example docker`, start the server with `uvx opensandbox-server`, then create a sandbox programmatically using the Python SDK: `await Sandbox.create('python:3.12', ...)`.

Related Projects

E2B

13.7k · Python
Active A+

E2B provides secure cloud sandboxes for AI agents, supporting code execution, file operations, and isolated compute as an execution layer for coding and automation workflows.

sandboxcode-executionsecurity +1
  • · Secure Cloud Sandboxes: Provides isolated cloud execution environment for AI agents
  • · Code Execution: Supports JavaScript/Python SDK to run AI-generated code
  • · File Operations: Perform file read/write and management within sandboxes

landrun

2.3k · Go
Normal A

landrun is a lightweight, Landlock-based Linux process sandbox that runs any program under tight capability isolation without requiring root.

sandboxlandlocklinux +2
  • · Landlock kernel isolation - leverages Linux 5.13+ Landlock LSM for filesystem access control
  • · No-root deployment - regular users can launch sandboxes without sudo or privileged containers
  • · Fine-grained policy - declare readable, writable, and executable directory sets from the CLI

Related Articles