Sandboxes & code execution AI agent tools
16 sandboxes & code execution tools in the AgentScout directory, each with a link-checked listing. Isolated sandboxes, microVMs and code-execution runtimes where agents can run generated code, shell commands and files without touching your machine: E2B, Modal, microsandbox, forkd, Judge0, Cloudflare Sandbox SDK and more.
Updated
There are 16 sandboxes & code execution tools: 15 open source, 1 free or freemium.
Quick comparison Top 10 of 16 listed below. Pricing as the maker states it; blank means we don't have it.
| Tool | Pricing | Best for | Open source |
|---|---|---|---|
 Zeroboot | Open source + cloud | Write code | Yes |
 AIO Sandbox | Open source | Write code | Yes |
 forkd | Open source | Write code | Yes |
 Agent Safehouse | Open source | Write code | Yes |
 Cloudflare Sandbox SDK | Open source + cloud | Write code | Yes |
 Tensorlake | Open source + cloud | Write code | Yes |
 Perplexity SPACE | Open source | Write code | Yes |
 NVIDIA OpenShell | Open source | Write code | Yes |
 E2B | Open source + cloud | Write code | Yes |
 Modal | Freemium | Write code |
Tasks in this category
Zeroboot
VM sandboxes for running agent code that start in under a millisecond by forking a warm snapshot with copy-on-write memory.
Added
AIO Sandbox
All-in-one Docker sandbox for AI agents that combines a browser, shell, files, MCP, VS Code Server and Jupyter in one container.
Added
forkd
MicroVM sandbox runtime for AI agent fan-out that forks KVM-isolated child VMs from a warm snapshot in milliseconds.
Added
Agent Safehouse
macOS sandbox for local coding agents that limits file and integration access with deny-first policy profiles.
Added
Cloudflare Sandbox SDK
SDK for running isolated code sandboxes on Cloudflare's network, so agents can execute commands and files safely from a Worker.
Added
Tensorlake
Serverless runtime that gives agents MicroVM sandboxes and durable orchestration for long-running background jobs.
Added
Perplexity SPACE
Perplexity's open-source sandbox platform that runs each agent task in its own Firecracker microVM, with credentials and network access controlled from outside.
Added
NVIDIA OpenShell
Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.
Added
E2B
Secure cloud sandboxes for running agent-generated code.
Added
Modal
Serverless compute and sandboxes for AI workloads.
Added
OpenSandbox
Secure, fast sandbox runtime for AI agents to run code.
Added
CubeSandbox
Lightweight, concurrent sandbox for running AI agent code securely.
Added
microsandbox
Local-first microVM runtime for running untrusted agent code safely.
Added
nono
Zero-trust sandboxing for agent runtimes.
Added
Judge0
Sandboxed code execution system for running untrusted code from people and AI.
Added
ArcBox
Runs AI agents on isolated machines with their own kernel, filesystem and network.
Added
Top sandboxes & code execution repos on GitHub (14)
| Repo | GitHub stars | Licence | Last push |
|---|---|---|---|
| NVIDIA OpenShell ↗ | 16,156 | Apache License 2.0 | 2026-10-19 |
| OpenSandbox ↗ | 15,907 | Apache License 2.0 | 2026-10-19 |
| CubeSandbox ↗ | 12,960 | Apache-2.0 (third-party components under their own licences) | 2026-10-19 |
| microsandbox ↗ | 8,717 | Apache License 2.0 | 2026-10-18 |
| AIO Sandbox ↗ | 6,180 | — | 2026-09-14 |
| nono ↗ | 4,535 | Apache License 2.0 | 2026-10-19 |
| Judge0 ↗ | 4,482 | GNU GPL v3.0 | 2026-10-18 |
| ArcBox ↗ | 4,240 | Apache License 2.0 | 2026-10-19 |
| forkd ↗ | 2,919 | — | 2026-09-14 |
| Zeroboot ↗ | 2,465 | — | — |
| Agent Safehouse ↗ | 2,110 | — | 2026-10-19 |
| Perplexity SPACE ↗ | 1,492 | — | 2026-10-19 |
| Cloudflare Sandbox SDK ↗ | 1,151 | — | 2026-10-19 |
| Tensorlake ↗ | 1,024 | — | 2026-10-19 |
14 repos. Stars and licence come from each repo, checked when the listing was last verified.
All categories
Related searches
Who uses these
Best-of lists
Task guides
Facts come from our directory listings; pricing is as each maker states it. Check official sites before you choose.