Microsandbox is an open source platform designed to securely execute untrusted code in isolated environments using lightweight virtualization techniques. It focuses on combining strong security guarantees with fast startup times by leveraging hardware-level microVM isolation instead of relying solely on traditional containers or full virtual machines. It aims to solve the common tradeoffs between speed, isolation, and control that developers encounter when running untrusted workloads. It provides a local-first and self-hosted approach, allowing users to maintain full ownership of their execution environment without depending on external cloud services. Microsandbox is particularly geared toward AI agent workflows, offering integrations that enable automated systems to safely run generated code and commands. It also supports standard container images, making it compatible with existing development ecosystems and tooling.
Features
- Hardware-level isolation using microVM technology for strong security
- Fast startup times with sandbox boot under 200 milliseconds
- Compatibility with OCI container images for flexible workloads
- Self-hosted deployment for full control over execution environments
- Integration with AI agent workflows through MCP support
- CLI tools for creating, managing, and executing sandbox instances