{
  "slug": "run-code-in-a-sandbox",
  "label": "run code in a sandbox",
  "blurb": "Run code an agent writes in an isolated container or microVM, away from your machine.",
  "keywords": [
    "sandbox",
    "code execution",
    "isolated",
    "microvm"
  ],
  "categories": [
    "infrastructure",
    "code-devtools"
  ],
  "access": [
    "api"
  ],
  "count": 43,
  "official": 20,
  "url": "https://agentswitchboard.dev/tasks/run-code-in-a-sandbox",
  "browseUrl": "https://agentswitchboard.dev/browse?task=run-code-in-a-sandbox",
  "agentsUrl": "https://agentswitchboard.dev/api/agents?task=run-code-in-a-sandbox",
  "agents": [
    {
      "name": "Vercel Sandbox",
      "slug": "vercel-sandbox",
      "url": "https://agentswitchboard.dev/agents/vercel-sandbox",
      "iconUrl": "https://agentswitchboard.dev/icons/vercel-sandbox.png?v=40448473",
      "description": "Runs untrusted or agent-generated code in isolated Firecracker microVMs on Vercel, with snapshots, persistent sandboxes, and custom images, via TypeScript and Python SDKs and a CLI.",
      "provider": "Vercel",
      "categories": [
        "browser-computer",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "bearer",
      "why": "Isolated MicroVMs: Runs each sandbox in a Firecracker microVM with its own filesystem and network."
    },
    {
      "name": "CubeSandbox",
      "slug": "cube-sandbox",
      "url": "https://agentswitchboard.dev/agents/cube-sandbox",
      "iconUrl": "https://agentswitchboard.dev/icons/cube-sandbox.png?v=69801ffa",
      "description": "Runs self-hosted, KVM-isolated sandboxes for agent code execution behind an E2B-compatible API, with snapshots, cloning, auto-pause, and kernel-level network policy.",
      "provider": "Tencent Cloud",
      "categories": [
        "infrastructure",
        "security"
      ],
      "accessMethods": [
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "none",
      "why": "Snapshot Clone Rollback: Checkpoints running sandboxes with the CubeCoW copy-on-write engine, then rolls back to or forks from any saved state."
    },
    {
      "name": "Perplexity SPACE",
      "slug": "perplexity-space",
      "url": "https://agentswitchboard.dev/agents/perplexity-space",
      "iconUrl": "https://agentswitchboard.dev/icons/perplexity-space.png?v=e6e5249f",
      "description": "Runs agent and user code in isolated Firecracker microVM sandboxes on your own infrastructure, with an HTTP API to create sandboxes and stream command output.",
      "provider": "Perplexity",
      "categories": [
        "infrastructure",
        "security"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "bearer",
      "why": "Sandbox Lifecycle: Creates sandboxes from templates and pauses, suspends, wakes or deletes them through asynchronous operations you poll."
    },
    {
      "name": "Sandbox0",
      "slug": "sandbox0",
      "url": "https://agentswitchboard.dev/agents/sandbox0",
      "iconUrl": "https://agentswitchboard.dev/icons/sandbox0.png?v=600789b0",
      "description": "Runs agent-generated code in managed cloud sandboxes with pause/resume and persistent root filesystems, through an auth-gated REST API and a CLI.",
      "provider": "Sandbox0",
      "categories": [
        "infrastructure",
        "code-devtools",
        "autonomous-agents"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Create Sandbox: Provisions an isolated cloud sandbox for running untrusted or agent-generated code via the REST API or CLI."
    },
    {
      "name": "OpenSandbox",
      "slug": "opensandbox",
      "url": "https://agentswitchboard.dev/agents/opensandbox",
      "iconUrl": "https://agentswitchboard.dev/icons/opensandbox.png?v=4ee544a5",
      "description": "Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem, and code-interpreter APIs across five language SDKs.",
      "provider": "OpenSandbox Group",
      "categories": [
        "infrastructure",
        "code-devtools",
        "security"
      ],
      "accessMethods": [
        "api",
        "mcp",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Sandbox Lifecycle Management: Creates, times out, and kills container sandboxes from a chosen image through one lifecycle API on Docker or Kubernetes."
    },
    {
      "name": "Docker Sandboxes",
      "slug": "docker-sandboxes",
      "url": "https://agentswitchboard.dev/agents/docker-sandboxes",
      "iconUrl": "https://agentswitchboard.dev/icons/docker-sandboxes.png?v=0b4ff87d",
      "description": "Disposable, isolated container sandboxes for running untrusted agent-generated code, with filesystem and network isolation managed by Docker.",
      "provider": "Docker",
      "categories": [
        "infrastructure",
        "security"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "apiKey",
      "why": null
    },
    {
      "name": "Agent Substrate",
      "slug": "agent-substrate",
      "url": "https://agentswitchboard.dev/agents/agent-substrate",
      "iconUrl": "https://agentswitchboard.dev/icons/agent-substrate.png?v=1d11d93e",
      "description": "Runs agents in secure-by-default microVM sandboxes on GKE, delivering high sandbox density and sub-second resume through Cloud Hypervisor and gVisor isolation.",
      "provider": "Google Cloud",
      "categories": [
        "infrastructure",
        "orchestration",
        "security"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Sandbox Execution: Runs untrusted agent-generated code inside an isolated microVM with a strict syscall boundary."
    },
    {
      "name": "BoxLite",
      "slug": "boxlite",
      "url": "https://agentswitchboard.dev/agents/boxlite",
      "iconUrl": "https://agentswitchboard.dev/icons/boxlite.png?v=3e80809c",
      "description": "Embeds hardware-isolated micro-VM sandboxes that run any OCI image with persistent state, via Python, Node, Go, and Rust SDKs, a CLI, or a REST server, for developers running agent code.",
      "provider": "BoxLite",
      "categories": [
        "infrastructure",
        "security"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Isolated Code Execution: Runs commands in a per-box hardware-virtualized VM with streamed stdout and stderr, PTY support, and timeouts."
    },
    {
      "name": "DigitalOcean Managed Agents",
      "slug": "digitalocean-managed-agents",
      "url": "https://agentswitchboard.dev/agents/digitalocean-managed-agents",
      "iconUrl": "https://agentswitchboard.dev/icons/digitalocean-managed-agents.png?v=e94eac6d",
      "description": "Runs agent harnesses like Claude Code, Codex CLI, and LangGraph in isolated cloud microVM sessions, with governed access to 16,000+ tools through a managed MCP endpoint.",
      "provider": "DigitalOcean",
      "categories": [
        "infrastructure",
        "orchestration"
      ],
      "accessMethods": [
        "api",
        "cli",
        "mcp"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "bearer",
      "why": "Session Lifecycle: Launches, attaches, pauses, resumes, and removes isolated microVM agent sessions with doctl harness-runtime, keeping state across…"
    },
    {
      "name": "NVIDIA OpenShell",
      "slug": "nvidia-openshell",
      "url": "https://agentswitchboard.dev/agents/nvidia-openshell",
      "iconUrl": "https://agentswitchboard.dev/icons/nvidia-openshell.png?v=754270a8",
      "description": "Runs autonomous agents in isolated sandboxes with kernel-level policy enforcement over files, syscalls, and network, injecting credentials only for approved endpoints.",
      "provider": "NVIDIA",
      "categories": [
        "security",
        "infrastructure"
      ],
      "accessMethods": [
        "cli",
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "none",
      "why": "Agent Sandboxes: Creates and manages isolated agent sandboxes from the openshell CLI, with configurable images, runtimes, GPU access, and lifecycle."
    },
    {
      "name": "Codex CLI",
      "slug": "codex-cli",
      "url": "https://agentswitchboard.dev/agents/codex-cli",
      "iconUrl": "https://agentswitchboard.dev/icons/codex-cli.png?v=4dbfec46",
      "description": "Runs a coding agent locally in the terminal, editing files and executing commands inside an OS sandbox with configurable approvals, plus headless `codex exec` for pipelines.",
      "provider": "OpenAI",
      "categories": [
        "code-devtools",
        "orchestration"
      ],
      "accessMethods": [
        "cli",
        "mcp"
      ],
      "verified": true,
      "official": true,
      "featured": true,
      "authType": "oauth2",
      "why": "Sandboxed Code Execution: Edits files and runs shell commands inside an OS-level sandbox, escalating to the user for approval per the configured…"
    },
    {
      "name": "Microsoft Execution Containers (MXC)",
      "slug": "microsoft-mxc",
      "url": "https://agentswitchboard.dev/agents/microsoft-mxc",
      "iconUrl": "https://agentswitchboard.dev/icons/microsoft-mxc.png?v=2685cd80",
      "description": "Runs untrusted model output, plugins, and tools in policy-driven sandboxes on Windows, Linux, and macOS through Rust, .NET, and Node SDKs, for apps that execute agent code.",
      "provider": "Microsoft",
      "categories": [
        "security",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "none",
      "why": "Policy-Driven Sandboxing: Applies JSON filesystem, network, and UI policies to each contained workload."
    },
    {
      "name": "context-mode",
      "slug": "context-mode",
      "url": "https://agentswitchboard.dev/agents/context-mode",
      "iconUrl": "https://agentswitchboard.dev/icons/context-mode.png?v=e6d569a7",
      "description": "Keeps raw tool output out of coding agents' context by running code and commands in a sandbox, indexing results for search, and restoring session state after compaction, via MCP.",
      "provider": "mksglu",
      "categories": [
        "code-devtools",
        "memory-state"
      ],
      "accessMethods": [
        "mcp",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Sandboxed Execution: Runs code in 12 languages or processes files in an isolated subprocess with ctx_execute, letting only stdout enter the agent's…"
    },
    {
      "name": "DeepSeek Harness",
      "slug": "deepseek-harness",
      "url": "https://agentswitchboard.dev/agents/deepseek-harness",
      "iconUrl": "https://agentswitchboard.dev/icons/deepseek-harness.png?v=edf31e90",
      "description": "Runs coding agents on a plugin-composed harness where models, tools, skills, sessions, sandboxes, storage, and the UI are all swappable plugins.",
      "provider": "DeepSeek",
      "categories": [
        "orchestration",
        "code-devtools"
      ],
      "accessMethods": [
        "cli",
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": true,
      "authType": "apiKey",
      "why": "Sandboxed Execution: Executes agent-generated commands and code inside pluggable sandbox backends isolated from the host filesystem."
    },
    {
      "name": "OpenHands",
      "slug": "openhands",
      "url": "https://agentswitchboard.dev/agents/openhands",
      "iconUrl": "https://agentswitchboard.dev/icons/openhands.png?v=f6ff405e",
      "description": "Software engineering agent platform — runs in sandboxed Docker containers, edits code, runs tests, fixes bugs, and opens PRs. REST API and WebSocket for remote access.",
      "provider": "All Hands AI",
      "categories": [
        "code-devtools",
        "browser-computer",
        "autonomous-agents"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "bearer",
      "why": "Code Agent: Autonomously write, edit, run, and test code across entire codebases in an isolated Docker container."
    },
    {
      "name": "E2B",
      "slug": "e2b",
      "url": "https://agentswitchboard.dev/agents/e2b",
      "iconUrl": "https://agentswitchboard.dev/icons/e2b.png?v=d683f4a0",
      "description": "Secure cloud sandboxes for AI agents to run code. Supports Python, JS, and shell. Persistent filesystem, network access, and sub-100ms cold starts.",
      "provider": "E2B",
      "categories": [
        "browser-computer"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Provision isolated cloud sandboxes for executing AI-generated code safely"
    },
    {
      "name": "Google AX",
      "slug": "google-ax",
      "url": "https://agentswitchboard.dev/agents/google-ax",
      "iconUrl": "https://agentswitchboard.dev/icons/google-ax.png?v=3ea10506",
      "description": "Runs sandboxed agentic tasks at cluster scale from declarative YAML Task, Workspace, and Model manifests on Agent Substrate, with a kubectl-style CLI for platform teams.",
      "provider": "Google",
      "categories": [
        "orchestration",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": true,
      "authType": "none",
      "why": "Sandbox Shell Access: Opens an interactive shell or runs one-off commands inside a running debug-enabled task sandbox with the ax ssh command."
    },
    {
      "name": "OpenAI Agents API",
      "slug": "openai-agents-api",
      "url": "https://agentswitchboard.dev/agents/openai-agents-api",
      "iconUrl": "https://agentswitchboard.dev/icons/openai-agents-api.png?v=4dbfec46",
      "description": "Run OpenAI's Codex harness as a managed service — durable sessions that survive restarts, hosted or self-hosted sandboxes, MCP connections, vaults, and multi-agent delegation.",
      "provider": "OpenAI",
      "categories": [
        "orchestration",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "mcp"
      ],
      "verified": true,
      "official": true,
      "featured": true,
      "authType": "apiKey",
      "why": "Sandbox Execution: Executes agent code in OpenAI-hosted or self-hosted sandboxes, with lifecycle and security controls per environment."
    },
    {
      "name": "pi pod",
      "slug": "pi-pod",
      "url": "https://agentswitchboard.dev/agents/pi-pod",
      "iconUrl": "https://agentswitchboard.dev/icons/pi-pod.png?v=c438f14c",
      "description": "Runs pi coding-agent sessions in isolated remote sandboxes on a server you host, and lets you attach from a terminal CLI or iOS and Android apps. For developers who self-host.",
      "provider": "pi pod",
      "categories": [
        "infrastructure",
        "code-devtools"
      ],
      "accessMethods": [
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "oauth2",
      "why": "Remote pods: Launches a pi session in a sandboxed pod for the current directory and attaches to it."
    },
    {
      "name": "Daytona",
      "slug": "daytona",
      "url": "https://agentswitchboard.dev/agents/daytona",
      "iconUrl": "https://agentswitchboard.dev/icons/daytona.png?v=30a2f192",
      "description": "Secure compute platform for AI-generated code. Provisions isolated dev environments with git integration. Built for running untrusted agent-generated code safely.",
      "provider": "Daytona",
      "categories": [
        "browser-computer"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Provision isolated development workspaces for agent-generated code in seconds"
    },
    {
      "name": "Maki",
      "slug": "maki",
      "url": "https://agentswitchboard.dev/agents/maki",
      "iconUrl": "https://agentswitchboard.dev/icons/maki.png?v=5c6872b9",
      "description": "Rust coding agent CLI with tree-sitter code indexing, sandboxed Python execution, and multi-tier subagents. Benchmarks show ~40% token reduction vs competing coding agents.",
      "provider": "Maki",
      "categories": [
        "code-devtools"
      ],
      "accessMethods": [
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Sandboxed Execution: Run Python code in isolated sandboxes during agent tasks without exposing the host environment"
    },
    {
      "name": "SandBase Harness",
      "slug": "sandbase-harness",
      "url": "https://agentswitchboard.dev/agents/sandbase-harness",
      "iconUrl": "https://agentswitchboard.dev/icons/sandbase-harness.png?v=bbd58b13",
      "description": "Runs local-first, self-hosted AI agents with persistent sessions, sandboxed tools, memory, credentials, audit trails, replay, and a built-in Console.",
      "provider": "SandBaseAI",
      "categories": [
        "orchestration",
        "code-devtools",
        "infrastructure"
      ],
      "accessMethods": [
        "cli",
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Sandboxed Tools: Runs agent-generated commands and code through local, Docker, Kubernetes, or self-hosted worker sandbox backends."
    },
    {
      "name": "Amazon Bedrock AgentCore",
      "slug": "bedrock-agentcore",
      "url": "https://agentswitchboard.dev/agents/bedrock-agentcore",
      "iconUrl": "https://agentswitchboard.dev/icons/bedrock-agentcore.png?v=fd9c599f",
      "description": "Production agent runtime on AWS with microVM isolation, 8-hour sessions, persistent memory, browser automation, MCP gateway, and USDC micropayment support.",
      "provider": "Amazon Web Services",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "mcp",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "apiKey",
      "why": "Agent Runtime Hosting: Deploy any agent framework to isolated Firecracker microVMs with auto-scaling, 8-hour session limits, and per-session billing."
    },
    {
      "name": "Hronaut",
      "slug": "hronaut",
      "url": "https://agentswitchboard.dev/agents/hronaut",
      "iconUrl": "https://agentswitchboard.dev/icons/hronaut.png?v=d398f319",
      "description": "Provides coding agents a visible local Electron browser through MCP, with persistent isolated workspaces and human pause/takeover for manual steps.",
      "provider": "Hronom",
      "categories": [
        "browser-computer",
        "code-devtools"
      ],
      "accessMethods": [
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Isolated Browser Profiles: Gives each project or agent a separate local browser profile with scoped access and workspace-level permissions."
    },
    {
      "name": "Vercel Agent Harnesses",
      "slug": "vercel-agent-harnesses",
      "url": "https://agentswitchboard.dev/agents/vercel-agent-harnesses",
      "iconUrl": "https://agentswitchboard.dev/icons/vercel-agent-harnesses.png?v=40448473",
      "description": "Runs Claude Code, Codex, OpenCode, and Pi as durable harnesses whose turns resume after crashes or timeouts, for teams deploying coding agents on Vercel.",
      "provider": "Vercel",
      "categories": [
        "orchestration",
        "code-devtools",
        "infrastructure"
      ],
      "accessMethods": [
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "bearer",
      "why": "Run Popular Harnesses: Runs Pi and OpenCode in your function, and Claude Code and Codex experimentally in a Vercel Sandbox, keeping each harness's…"
    },
    {
      "name": "Modal",
      "slug": "modal",
      "url": "https://agentswitchboard.dev/agents/modal",
      "iconUrl": "https://agentswitchboard.dev/icons/modal.png?v=6ebae8b0",
      "description": "Serverless cloud for running Python functions, GPU workloads, and sandboxed agent code, defined in code and deployed without managing infrastructure.",
      "provider": "Modal",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "apiKey",
      "why": null
    },
    {
      "name": "Gemini CLI",
      "slug": "gemini-cli",
      "url": "https://agentswitchboard.dev/agents/gemini-cli",
      "iconUrl": "https://agentswitchboard.dev/icons/gemini-cli.png?v=bae4a0ed",
      "description": "Google's open-source AI agent CLI that brings Gemini into your terminal with MCP client support, tool use, code execution, and multi-modal capabilities.",
      "provider": "Google",
      "categories": [
        "code-devtools"
      ],
      "accessMethods": [
        "cli",
        "mcp"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "oauth2",
      "why": "Code Execution: Execute code in sandboxed environments and iterate on results within the same CLI session"
    },
    {
      "name": "Pydantic AI",
      "slug": "pydantic-ai",
      "url": "https://agentswitchboard.dev/agents/pydantic-ai",
      "iconUrl": "https://agentswitchboard.dev/icons/pydantic-ai.png?v=ea11377d",
      "description": "Type-safe Python agent framework from the Pydantic team. Built-in MCP client, ships a sandboxed Python execution MCP server. pip install pydantic-ai. 17k stars.",
      "provider": "Pydantic",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "cli",
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Sandboxed Python Execution: Run Python code in a sandboxed MCP server (mcp-run-python) — an official server bundled with the SDK."
    },
    {
      "name": "Klavis AI",
      "slug": "klavis",
      "url": "https://agentswitchboard.dev/agents/klavis",
      "iconUrl": "https://agentswitchboard.dev/icons/klavis.png?v=f9371f23",
      "description": "Connects agents to 100+ third-party MCP integrations with managed OAuth, hosted or self-hosted servers, and Strata progressive tool discovery for very large tool sets.",
      "provider": "Klavis AI",
      "categories": [
        "orchestration",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "mcp",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Run MCP Sandboxes: Provisions scalable MCP environments for LLM training and reinforcement learning experiment workloads."
    },
    {
      "name": "Strands Box",
      "slug": "strands-box",
      "url": "https://agentswitchboard.dev/agents/strands-box",
      "iconUrl": "https://agentswitchboard.dev/icons/strands-box.png?v=fd9c599f",
      "description": "Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across shell, Python, HTTP egress, and MCP calls; macOS preview.",
      "provider": "AWS",
      "categories": [
        "security",
        "infrastructure"
      ],
      "accessMethods": [
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "none",
      "why": null
    },
    {
      "name": "Clawk",
      "slug": "clawk",
      "url": "https://agentswitchboard.dev/agents/clawk",
      "iconUrl": "https://agentswitchboard.dev/icons/clawk.png?v=d008c920",
      "description": "Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.",
      "provider": "Clawkwork",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Disposable Sandbox: Spins up a throwaway Linux VM per session so agent commands run isolated from the host and vanish afterward."
    },
    {
      "name": "Container Use",
      "slug": "container-use",
      "url": "https://agentswitchboard.dev/agents/container-use",
      "iconUrl": "https://agentswitchboard.dev/icons/container-use.png?v=70c3dee9",
      "description": "MCP server that gives coding agents isolated containerised environments in separate git branches, enabling multiple agents to work safely in parallel without conflicts.",
      "provider": "Dagger",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "mcp",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Isolated Agent Environment: Spin up a fresh container in a dedicated git branch so each coding agent operates independently without touching shared…"
    },
    {
      "name": "ToolHive",
      "slug": "toolhive",
      "url": "https://agentswitchboard.dev/agents/toolhive",
      "iconUrl": "https://agentswitchboard.dev/icons/toolhive.png?v=18528df4",
      "description": "Runs MCP servers in isolated containers locally or on Kubernetes, with a CLI, desktop UI, operator, registry, and gateway that apply secrets, auth policy, and telemetry for teams.",
      "provider": "Stacklok",
      "categories": [
        "infrastructure",
        "security"
      ],
      "accessMethods": [
        "cli",
        "api",
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "none",
      "why": "Run MCP Servers: Starts MCP servers from container images, registry entries, or package managers inside isolated containers with `thv run`."
    },
    {
      "name": "Cua",
      "slug": "cua",
      "url": "https://agentswitchboard.dev/agents/cua",
      "iconUrl": "https://agentswitchboard.dev/icons/cua.png?v=f91a976c",
      "description": "Open-source infrastructure for computer-use agents — virtualized macOS, Linux, and Windows sandboxes, SDKs, and benchmarks for agents that control full desktop environments.",
      "provider": "trycua",
      "categories": [
        "browser-computer"
      ],
      "accessMethods": [
        "api"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "VM Sandboxes: Spin up virtualized macOS, Linux, or Windows environments for computer-use agent tasks safely"
    },
    {
      "name": "IronClaw",
      "slug": "ironclaw",
      "url": "https://agentswitchboard.dev/agents/ironclaw",
      "iconUrl": "https://agentswitchboard.dev/icons/ironclaw.png?v=0e63b943",
      "description": "Runs a self-hosted, security-focused personal assistant in Rust with WASM-sandboxed tools, routines, persistent memory, and REPL, webhook, chat, and web channels.",
      "provider": "NEAR AI",
      "categories": [
        "autonomous-agents",
        "security"
      ],
      "accessMethods": [
        "cli",
        "api"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "WASM Tool Sandbox: Runs untrusted tools in isolated WebAssembly containers with capability-based permissions and an allowlist of approved HTTP hosts."
    },
    {
      "name": "OpenComputer",
      "slug": "opencomputer",
      "url": "https://agentswitchboard.dev/agents/opencomputer",
      "iconUrl": "https://agentswitchboard.dev/icons/opencomputer.png?v=ef378f34",
      "description": "Deploys TypeScript agents onto real Linux machines with durable sessions and tool support, hosted or self-run. Positioned as a Firebase-style backend for agents.",
      "provider": "Digger",
      "categories": [
        "infrastructure",
        "orchestration"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Tool Runtime: Runs agent tool calls inside the hosted machine, giving agents shell and filesystem access within a sandbox."
    },
    {
      "name": "Devin",
      "slug": "devin",
      "url": "https://agentswitchboard.dev/agents/devin",
      "iconUrl": "https://agentswitchboard.dev/icons/devin.png?v=9a0b3e88",
      "description": "Autonomously plans, writes, tests, and ships production code end-to-end with its own shell, code editor, and browser in a sandboxed environment.",
      "provider": "Cognition AI",
      "categories": [
        "code-devtools",
        "autonomous-agents"
      ],
      "accessMethods": [
        "api",
        "browser-extension"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "bearer",
      "why": null
    },
    {
      "name": "Notion Workers",
      "slug": "notion-workers",
      "url": "https://agentswitchboard.dev/agents/notion-workers",
      "iconUrl": "https://agentswitchboard.dev/icons/notion-workers.png?v=aee301b1",
      "description": "Hosts custom code Workers in a secure sandbox and connects external AI agents like Claude and Codex into Notion workspaces via a developer API.",
      "provider": "Notion",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "oauth2",
      "why": null
    },
    {
      "name": "AutoGen",
      "slug": "autogen",
      "url": "https://agentswitchboard.dev/agents/autogen",
      "iconUrl": "https://agentswitchboard.dev/icons/autogen.png?v=b809713c",
      "description": "Microsoft's open-source multi-agent framework. Supports conversational, autonomous, and human-in-the-loop agent patterns in Python and TypeScript with event-driven orchestration.",
      "provider": "Microsoft",
      "categories": [
        "infrastructure",
        "orchestration"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "apiKey",
      "why": "Code Execution: Execute LLM-generated code in sandboxed environments with Docker or local Python runtime"
    },
    {
      "name": "Hilt Pay Agent Gateway",
      "slug": "hilt-pay",
      "url": "https://agentswitchboard.dev/agents/hilt-pay",
      "iconUrl": "https://agentswitchboard.dev/icons/hilt-pay.png?v=32e6a787",
      "description": "Gives agents x402 V2 paid-request access on Solana USDC — settlement verification, receipts, entitlements, atomic metering, and webhooks. Zero-custody; ships A2A agent card, MCP, and API.",
      "provider": "Hilt",
      "categories": [
        "commerce-payments",
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": "Sandbox Bootstrap: Bootstraps a sandbox workspace so agents can test the full payment-to-access flow without real funds."
    },
    {
      "name": "Cloudflare Computer",
      "slug": "cloudflare-computer",
      "url": "https://agentswitchboard.dev/agents/cloudflare-computer",
      "iconUrl": "https://agentswitchboard.dev/icons/cloudflare-computer.png?v=7c4f193b",
      "description": "Gives agents on Cloudflare Workers a durable SQLite-backed filesystem in a Durable Object, with shell, JavaScript, and container execution backends, git, and AI SDK tools.",
      "provider": "Cloudflare",
      "categories": [
        "infrastructure",
        "code-devtools"
      ],
      "accessMethods": [
        "api"
      ],
      "verified": true,
      "official": true,
      "featured": false,
      "authType": "none",
      "why": null
    },
    {
      "name": "machine0",
      "slug": "machine0",
      "url": "https://agentswitchboard.dev/agents/machine0",
      "iconUrl": "https://agentswitchboard.dev/icons/machine0.png?v=a81e3c47",
      "description": "Persistent CPU and GPU virtual machines for agents that need long-running state, letting a session keep its filesystem and processes between runs. Y Combinator S26.",
      "provider": "machine0",
      "categories": [
        "infrastructure"
      ],
      "accessMethods": [
        "api",
        "cli"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "apiKey",
      "why": null
    },
    {
      "name": "Sprites (Fly.io)",
      "slug": "fly-sprites",
      "url": "https://agentswitchboard.dev/agents/fly-sprites",
      "iconUrl": "https://agentswitchboard.dev/icons/fly-sprites.png?v=9462233b",
      "description": "Gives agents persistent Linux computers with checkpoint and restore, per-Sprite HTTPS URLs, and credential-free connectors, via a CLI, REST API, SDKs, and remote MCP server.",
      "provider": "Fly.io",
      "categories": [
        "browser-computer",
        "infrastructure"
      ],
      "accessMethods": [
        "cli",
        "api",
        "mcp"
      ],
      "verified": true,
      "official": false,
      "featured": false,
      "authType": "bearer",
      "why": null
    }
  ],
  "relatedTasks": [
    "monitor-apps-in-production",
    "deploy-an-app",
    "write-and-fix-code",
    "query-a-database"
  ],
  "stacks": [
    "research-analyst",
    "coding-agent-team"
  ]
}