sandbox
starsforks
How to install sandbox?
agent-infra/sandbox
$git clone https://github.com/agent-infra/sandboxGet up and running in 30 seconds:
README.md
| 1 | # AIO Sandbox - All-in-One Agent Sandbox Environment |
| 2 | |
| 3 | <p align="center"> |
| 4 | <img src="./website/docs/public/aio-icon.png" alt="logo" width="200"/> |
| 5 | </p> |
| 6 | |
| 7 | <p align="center"> |
| 8 | <strong>🌐 Browser | 💻 Terminal | 📁 File | 🔧 VSCode | 📊 Jupyter | 🤖 MCP</strong> |
| 9 | </p> |
| 10 | |
| 11 | <div align="center"> |
| 12 | <p> |
| 13 | 🌐 <a href="https://sandbox.agent-infra.com/">Website</a>   |
| 14 | |   🔌 <a href="https://sandbox.agent-infra.com/api">API</a>   |
| 15 | |   📑 <a href="https://arxiv.org/pdf/2509.02544#S2.SS2">Paper</a>   |
| 16 | |   🌟 <a href="https://github.com/agent-infra/sandbox/tree/main/examples">Examples</a>   |
| 17 | |   📊 <a href="https://github.com/agent-infra/sandbox/tree/main/evaluation">Evaluation</a>    |
| 18 | </p> |
| 19 | </div> |
| 20 | |
| 21 | <p align="center"> |
| 22 | <a href="https://github.com/agent-infra/sandbox/releases"><img src="https://img.shields.io/github/v/release/agent-infra/sandbox" alt="Release"></a> |
| 23 | <a href="https://github.com/agent-infra/sandbox/blob/main/LICENSE"><img src="https://img.shields.io/github/license/agent-infra/sandbox" alt="License"></a> |
| 24 | <a href="https://pypi.org/project/agent-sandbox/"><img src="https://img.shields.io/pypi/v/agent-sandbox" alt="PyPI"></a> |
| 25 | <a href="https://www.npmjs.com/package/@agent-infra/sandbox"><img src="https://img.shields.io/npm/v/@agent-infra/sandbox" alt="npm"></a> |
| 26 | </p> |
| 27 | |
| 28 |  |
| 29 | |
| 30 | ## 🚀 Quick Start |
| 31 | |
| 32 | Get up and running in 30 seconds: |
| 33 | |
| 34 | ```bash |
| 35 | # Recommended: Enable API Key authentication (protects all services: API, JupyterLab, VNC) |
| 36 | # - Supports three methods: X-AIO-API-Key header, Authorization: Bearer header, ?api_key= query parameter |
| 37 | # - Without SANDBOX_API_KEY, services remain open (backward compatible) |
| 38 | docker run --security-opt seccomp=unconfined --rm -it \ |
| 39 | -e SANDBOX_API_KEY=your-secret-key \ |
| 40 | -p 127.0.0.1:8080:8080 ghcr.io/agent-infra/sandbox:latest |
| 41 | ``` |
| 42 | |
| 43 | For users in mainland China: |
| 44 | |
| 45 | ```bash |
| 46 | docker run --security-opt seccomp=unconfined --rm -it \ |
| 47 | -e SANDBOX_API_KEY=your-secret-key \ |
| 48 | -p 127.0.0.1:8080:8080 enterprise-public-cn-beijing.cr.volces.com/vefaas-public/all-in-one-sandbox:1.11.0 |
| 49 | ``` |
| 50 | |
| 51 | For reproducible deployments, pin a release tag. Replace `1.11.0` with the release you want: |
| 52 | |
| 53 | ```bash |
| 54 | docker run --security-opt seccomp=unconfined --rm -it \ |
| 55 | -p 127.0.0.1:8080:8080 ghcr.io/agent-infra/sandbox:1.11.0 |
| 56 | # or use the pinned mainland China mirror |
| 57 | docker run --security-opt seccomp=unconfined --rm -it \ |
| 58 | -p 127.0.0.1:8080:8080 enterprise-public-cn-beijing.cr.volces.com/vefaas-public/all-in-one-sandbox:1.11.0 |
| 59 | ``` |
| 60 | |
| 61 | These examples intentionally bind the host side to `127.0.0.1` because the sandbox listens on `0.0.0.0` inside the container. For cloud deployment, keep port `8080` private and publish it through a reverse proxy or Ingress: [Cloud Deployment Guide](https://sandbox.agent-infra.com/guide/start/cloud-deployment). |
| 62 | |
| 63 | Once running, access the environment at: |
| 64 | - 📖 **Documentation**: http://localhost:8080/v1/docs |
| 65 | - 🌐 **VNC Browser**: http://localhost:8080/vnc/index.html?autoconnect=true |
| 66 | - 💻 **VSCode Server**: http://localhost:8080/code-server/ |
| 67 | - 🤖 **MCP Services**: http://localhost:8080/mcp |
| 68 | |
| 69 | ## 🎯 What is AIO Sandbox? |
| 70 | |
| 71 | AIO Sandbox is an **all-in-one** agent sandbox environment that combines Browser, Shell, File, MCP operations, and VSCode Server in a single Docker container. Built on cloud-native lightweight sandbox technology, it provides a unified, secure execution environment for AI agents and developers. |
| 72 | |
| 73 | <p align="center"> |
| 74 | <img src="website/docs/public/images/aio-sandbox.png" alt="AIO Sandbox Architecture" width="600"/> |
| 75 | </p> |
| 76 | |
| 77 | ### Why Choose AIO Sandbox? |
| 78 | |
| 79 | Traditional sandboxes are **single-purpose** (browser, code, or shell), making file sharing and functional coordination extremely challenging. AIO Sandbox solves this by providing: |
| 80 | |
| 81 | - ✅ **Unified File System** - Files downloaded in browser are instantly available in Shell/File operations |
| 82 | - ✅ **Multiple Interfaces** - VNC, VSC |
People who liked this also viewed
6 picksType
- mcp-proxy-for-awsAWS MCP Proxy ServerMCP ServersJul 2026
- pydantic-ai-backendFile Storage & Sandbox Backends for Pydantic AI: console tools for file operations, Docker-isolated sandboxes for safe execution, and permission system with presets for access control. Enables secure multi-user handling and testing in agents via in-memory, local, or containerized storage.MCP ServersJul 2026
- mcp-for-argocdAn implementation of Model Context Protocol (MCP) server for Argo CD.MCP ServersJul 2026
- heroku-mcp-serverHeroku Platform MCP Server using the Heroku CLIMCP ServersJul 2026
- ghost-mcpA Model Context Protocol (MCP) server for interacting with Ghost CMS through LLM interfaces like Claude. Allow you to control your Ghost blog by simply asking Claude etc.MCP ServersApr 2026
- Google DriveUpload, organize, and share files in the cloud. Manage folders, set permissions, and search across stored documents.MCP Serversrecently
