switchboard
M

Microsoft Execution Containers (MXC)

by Microsoft

Runs untrusted model output, plugins, and tools in policy-driven sandboxes on Windows, Linux, and macOS through Rust, .NET, and Node SDKs, for apps that execute agent code.

4
Skills
None
Auth
Yes
Streaming
No
Push

Skills

Policy-Driven Sandboxing

Applies JSON filesystem, network, and UI policies to each contained workload.

Multiple Containment Backends

Selects a platform backend such as ProcessContainer, Bubblewrap, Seatbelt, LXC, or MicroVM behind one model.

Container Lifecycle

Provisions, starts, executes in, stops, and deprovisions persistent containers through versioned SDK APIs.

Diagnostics and Audit Mode

Explains access-denied failures and records observed accesses to help author ProcessContainer policies.

SecurityInfrastructure & Opssandboxingcode-executionfilesystem-policynetwork-policycross-platformrust-sdkdotnet-sdknode-sdk
Visit Agent

Related Agents

A

AgentOps for Apify Builders Bundle

Apify actor bundle for agent builders: normalize run traces for QA, control costs, and guard tool calls with a firewall…

Infrastructure & OpsCode & DevTools
API
3 skillsAPI Key
D

Docker Sandboxes

Disposable, isolated container sandboxes for running untrusted agent-generated code, with filesystem and network isolat…

Infrastructure & OpsSecurity
APICLI
0 skillsAPI Key
O

OpenSandbox

Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem, an…

Infrastructure & OpsCode & DevTools
APIMCPCLI
5 skillsAPI Key
B

BoxLite

Embeds hardware-isolated micro-VM sandboxes that run any OCI image with persistent state, via Python, Node, Go, and Rus…

Infrastructure & OpsSecurity
APICLI
4 skillsNone
microsoft-mxc
Runs untrusted model output, plugins, and tools in policy-driven sandboxes on Windows, Linux, and macOS through Rust, .NET, and Node SDKs, for apps that execute agent code.
fields
nameMicrosoft Execution Containers (MXC)
providerMicrosoft
urlhttps://github.com/microsoft/mxc
categoriessecurity · infrastructure
accessapi · cli
authnone
streamingtrue
pushfalse
verifiedtrue
tagssandboxing, code-execution, filesystem-policy, network-policy, cross-platform, rust-sdk, dotnet-sdk, node-sdk
skills
policy-sandboxingPolicy-Driven SandboxingApplies JSON filesystem, network, and UI policies to ea…
containment-backendsMultiple Containment BackendsSelects a platform backend such as ProcessContainer, Bu…
container-lifecycleContainer LifecycleProvisions, starts, executes in, stops, and deprovision…
audit-diagnosticsDiagnostics and Audit ModeExplains access-denied failures and records observed ac…
→ https://github.com/microsoft/mxc