microsandbox
microsandbox.dev
What it is
Microsandbox runs untrusted workloads inside microVMs, each with its own Linux kernel, filesystem, and network boundary rather than sharing the host kernel. It can run AI agents, user code, plugins, CI jobs, scrapers, and automation. The local runtime starts on a user's machine without a daemon, root service, or account; it can also run on personal servers or clusters, and its cloud platform can be deployed in the user's infrastructure. Microsandbox offers SDKs for TypeScript, Rust, Python, Go, and Ruby, plus a CLI and MCP workflows, and accepts OCI images from container registries. By default, sandboxes can reach the public internet, while private, host-local, link-local, and metadata destinations are blocked; egress can be allowlisted or disabled. The runtime is open source under Apache 2.0. The Free plan is $0 per month, while paid plans start at $49 per month. Microsandbox Cloud is in private beta and requires an access request.
Spec sheet
- What it does
- Microsandbox is a local-first microVM runtime for running untrusted workloads, including AI agents, user code, plugins, CI jobs, scrapers, and automation.Read 30 Sep 2026 · docs.microsandbox.dev
- Support
- The product FAQ directs users with questions to its Discord community.Read 30 Sep 2026 · microsandbox.dev
- License
- The runtime is open source under the Apache 2.0 license.Read 30 Sep 2026 · microsandbox.dev
- Company
- Microsandbox is designed and engineered by Super Rad Company, whose stated purpose is building tools for the agentic future.Read 30 Sep 2026 · superrad.company
- Cloud availability
- Microsandbox Cloud is in private beta and requires users to request access.Read 30 Sep 2026 · docs.microsandbox.dev
- Credential handling
- Bound secrets are represented by placeholders inside the sandbox and substituted host-side for supported intercepted requests to approved destinations.Read 30 Sep 2026 · microsandbox.dev
- Credential limitation
- Secret substitution requires intercepted TLS by default, and body substitution is opt-in with format and size limits.Read 30 Sep 2026 · microsandbox.dev
- Images
- The runtime accepts OCI images from Docker Hub, GHCR, ECR, GCR, or another registry.Read 30 Sep 2026 · docs.microsandbox.dev
- Integrations and languages
- The product supports SDKs for TypeScript, Rust, Python, Go, and Ruby, plus a CLI and MCP workflows.Read 30 Sep 2026 · microsandbox.dev
- Isolation
- Each sandbox is a microVM with its own Linux kernel, filesystem, and network boundary, rather than a container sharing the host kernel.Read 30 Sep 2026 · docs.microsandbox.dev
- Local runtime
- The local runtime starts on the user's machine without a daemon, root service, or account.Read 30 Sep 2026 · microsandbox.dev
- Network controls
- By default, sandboxes can reach the public internet while private, host-local, link-local, and metadata destinations are blocked; egress can be allowlisted or disabled.Read 30 Sep 2026 · microsandbox.dev
- Self-hosting
- The runtime can be run on the user's own servers or clusters, and the cloud platform can be deployed in the user's infrastructure.Read 30 Sep 2026 · docs.microsandbox.dev
- Snapshots
- Local full snapshots can preserve disk, memory, and running processes; managed cloud currently supports disk snapshots from stopped persistent sandboxes and disk restore.Read 30 Sep 2026 · microsandbox.dev
Plans and prices
Strong points and limits
Strong points
- Each sandbox has its own kernel and network boundary.
- Local runtime needs no daemon, root service, or account.
- SDKs cover five listed programming languages.
- Supports OCI images and configurable egress controls.
- Free plan; runtime is Apache 2.0 open source.
Limits
- Cloud access requires a request during private beta.
- Secret substitution requires intercepted TLS by default.
- Free plan caps workloads at three sandboxes.
- Builder costs $49 per month.
Who it suits
It suits developers and teams that need to run untrusted workloads locally or on their own infrastructure. Cloud users must request access while the service is in private beta.
Verdict
Microsandbox specifies its isolation model, runtime options, integrations, and network defaults in detail. Check the plan limits and credential-substitution requirements against your workload before choosing a paid tier.
Where Specifiction places it
- Sandbox Software#8 of 268.2