Sandboxes for AI agents to run code (2026)

Sandboxes and isolated runtimes where agents can run code and tools away from your machine and data. Here are all 22 from the AgentScout directory.

How we picked and ranked: tools are matched by category, the pricing each maker states and what each tool says it does. They are ranked by GitHub stars as recorded on each listing (link checks 2026-10-18); tools without a tracked repo follow, by listing maturity. No paid placements.

1. D

   1. Deer Flow

   researchOpen source★ 83,959 GitHub stars

   ByteDance's open-source long-horizon agent harness that researches, codes and creates using sandboxes, memory and sub-agents.

   Pricing (as stated): Open source · Mature

2. C

   2. Context Mode

   codingOpen source★ 30,192 GitHub stars

   Context window optimizer for coding agents that sandboxes tool output and persists session memory.

   Pricing (as stated): Open source · Mature

3. C

   3. Cua

   browser/computer useOpen source + cloud★ 29,966 GitHub stars

   Open-source infrastructure for computer-use agents: sandboxes, drivers across operating systems and benchmarks.

   Pricing (as stated): Open source + cloud · Mature

4. E

   4. ego lite

   browser/computer useFreemium★ 17,562 GitHub stars

   Free macOS browser where Claude Code or Codex run automation tasks in their own isolated Spaces next to your tabs, reusing your logged-in sessions through an agent skill.

   Pricing (as stated): Freemium · Mature

5. N

   5. NVIDIA OpenShell

   MCP & infraOpen source★ 16,156 GitHub stars

   Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access.

   Pricing (as stated): Open source (Apache 2.0) · Active; part of newly announced Open Agent Safety Platform

6. O

   6. OpenSandbox

   MCP & infraOpen source★ 15,907 GitHub stars

   Secure, fast sandbox runtime for AI agents to run code.

   Pricing (as stated): Open source · Mature

7. C

   7. CubeSandbox

   MCP & infraOpen source★ 12,960 GitHub stars

   Lightweight, concurrent sandbox for running AI agent code securely.

   Pricing (as stated): Open source · Mature

8. O

   8. Open SWE

   codingOpen source★ 11,034 GitHub stars

   LangChain's asynchronous coding agent that takes work from GitHub issues, Slack or Linear, implements it in an isolated sandbox and opens a pull request.

   Pricing (as stated): Open source · Mature

9. M

   9. microsandbox

   MCP & infraOpen source★ 8,717 GitHub stars

   Local-first microVM runtime for running untrusted agent code safely.

   Pricing (as stated): Open source · Mature

10. S

    10. Steel

    browser/computer useOpen source + cloud★ 7,821 GitHub stars

    Open-source browser API and sandbox for AI agents to control web browsers at scale.

    Pricing (as stated): Open source + cloud · Mature

11. A

    11. Agent Governance Toolkit

    evals & observabilityOpen source★ 6,435 GitHub stars

    Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents.

    Pricing (as stated): Open source · Mature

12. N

    12. nono

    MCP & infraOpen source★ 4,535 GitHub stars

    Zero-trust sandboxing for agent runtimes.

    Pricing (as stated): Open source · Active

13. J

    13. Judge0

    MCP & infraOpen source + cloud★ 4,482 GitHub stars

    Sandboxed code execution system for running untrusted code from people and AI.

    Pricing (as stated): Open source + cloud · Active

14. A

    14. ArcBox

    MCP & infraOpen source★ 4,240 GitHub stars

    Runs AI agents on isolated machines with their own kernel, filesystem and network.

    Pricing (as stated): Open source · Active

15. H

    15. HolmesGPT

    codingOpen source★ 3,616 GitHub stars

    CNCF sandbox SRE agent that investigates alerts and incidents.

    Pricing (as stated): Open source · Active

16. O

    16. OneCLI

    MCP & infraOpen source★ 3,576 GitHub stars

    Sandboxed agent harness for teams with secure credential handling.

    Pricing (as stated): Open source · Active

17. M

    17. Moltis

    personal agentsOpen source★ 2,890 GitHub stars

    Secure personal agent server in Rust with sandboxed execution.

    Pricing (as stated): Open source · Active

18. L

    18. Lyzr

    frameworksFreemium★ 276 GitHub stars

    Enterprise agent studio and framework for building secure AI agents.

    Pricing (as stated): Freemium · Active

19. E

    19. E2B

    MCP & infraOpen source + cloud

    Secure cloud sandboxes for running agent-generated code.

    Pricing (as stated): Open source + paid cloud · Mature

20. M

    20. Modal

    MCP & infraFreemium

    Serverless compute and sandboxes for AI workloads.

    Pricing (as stated): Usage-based, free credits · Mature

21. S

    21. Scalebrowser

    browser/computer usePaid

    Gives each agent its own isolated browser with a persistent identity for staying signed in.

    Pricing (as stated): Paid · Active

22. C

    22. CoreWeave Forge

    evals & observabilityFreemium

    One product to run, observe, evaluate and post-train agents (W&B, OpenPipe, sandboxes).

    Pricing (as stated): Free $0/mo; Pro from $60/mo; Enterprise custom · Newly launched

FAQ

What are the best AI code sandboxes?

Ranked by tracked GitHub stars, the top AI code sandboxes in our directory are Deer Flow, Context Mode, Cua, ego lite, NVIDIA OpenShell. Stars measure popularity, not fit, so compare a few against your own task.

How many AI code sandboxes does AgentScout list?

22 tools match. This page shows the top 22. Pricing mix on this page: Open source (13), Open source + cloud (4), Freemium (4), Paid (1).

How much do these tools cost?

Pricing is what each maker states on their site. Open-source tools are free to self-host but may need a paid model API key or offer paid cloud plans; freemium tools have a free plan with limits. Check each official site.

Where can I see every tool for running code safely?

Our task page lists all 22 tools we match to running code safely.

Related: All tools for running code safely · MCP & infra (10) · browser/computer use (4) · coding (3) · evals & observability (2)

By role: For developers · For DevOps and SRE engineers · For security engineers

All popular searches · AI agents by role · Free tools · Popular searches · AI agents by role · Newsletter archive

Best-of lists: Best MCP servers for Cursor · All best lists

Facts come from our directory listings; pricing is as each maker states it and can change. Check official sites before you choose.