Microsoft eXecution Containers, or MXC, is a sandboxed code execution system for running untrusted code across Windows, Linux, and macOS. It is designed for model outputs, plugins, tools, and other code that needs controlled execution boundaries. The project provides a unified JSON configuration schema and a TypeScript SDK while supporting multiple containment backends. Its backends include process containers, Windows Sandbox, LXC, Bubblewrap, Seatbelt, microVM-based options, Hyperlight, IsolationSession, and WSL-related containment. MXC focuses on policy-driven isolation for filesystems, networking, process execution, and runtime behavior. It is especially useful for AI tool platforms, plugin ecosystems, agent runtimes, and developer products that need safer execution of generated or third-party code.
Features
- Cross-platform sandboxed execution
- JSON-based security configuration
- TypeScript SDK support
- Multiple containment backends
- Filesystem and network policy controls
- Untrusted code execution workflows