microsandbox

——   every agent deserves its own computer   ——

  Microsandbox

Microsandbox spins up **lightweight VMs in milliseconds** from our SDKs. Runs locally on your machine. No server to set up. No lingering daemon. It is all embedded and rootless!

Today, AI agents operate with whatever permissions you give them, and that's usually _too much_. They can see _API keys_ in the environment, reach the network without restriction, and a single prompt injection _can execute destructive commands_ on your host. Containers help, but they share the host kernel, making _namespace escapes_ a known risk. Microsandbox solves this with **hardware-level VM isolation** that boots in milliseconds.

• Hardware Isolation: Hypervisor-level isolation with microVM technology.
• Instant Startup: Boot times under 100 milliseconds.
• Embeddable: Spawn VMs right within your code. No setup server. No long-running daemon.
• Secrets That Can't Leak: Secret keys never enter the VM. The guest VM only sees placeholders.
• OCI Compatible: Runs standard container images from Docker Hub, GHCR, or any OCI registry.
• Long-Running: Sandboxes can run in detached mode. They are great for long-lived sessions.
• Agent-Ready: Your agents can create their own sandboxes with our Agent Skills and MCP server.

Microsandbox is still **beta software**. Expect breaking changes, missing features, and rough edges.

  Getting Started

  Install the SDK

...