# Blaxel Sandboxes

Give a computer to your agent

Source: https://wheredoirunthis.com/products/blaxel · JSON: https://wheredoirunthis.com/api/products/blaxel · Read on 2026-10-12

## At a glance

- Type: Sandbox
- Kind: Hosted
- Isolation: Virtual machine
- Free tier: Not documented
- Starting price: Not disclosed
- GPU: No
- Regions: 4
- Coverage: 25 of 61 assessed capabilities supported
- Agent readiness: read 11 of 11 signals, drive 10 of 11 signals

## Links

- Homepage: https://blaxel.ai/platform/sandboxes
- Docs: https://docs.blaxel.ai/Sandboxes/Overview
- Pricing: https://blaxel.ai/pricing
- Repository: https://github.com/blaxel-ai/sandbox

## Pricing

- Model: usage-based wallet; optional custom deployment
- Unit: GB allocated RAM-second of active execution; storage GB-month
- Free tier: Up to $200 introductory credits; tier 0 permits 10 sandboxes. Promotional credits do not unlock paid quota tiers.

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Pay-as-you-go | $0 + usage | Up to $200 introductory credits; internet egress included; zero compute charges on standby. | Minimum top-up tiers are wallet deposits, not subscription charges. [source](https://blaxel.ai/pricing) |
| Custom | Contact us |  | Up to 256 GB RAM, private network connectivity, BYOC, custom SLA and hardware. [source](https://blaxel.ai/pricing) |

- Overages: Active sandbox $0.0000115/GB RAM-second; snapshot $0.20/GB-month; images $0.045/GB-month; volumes $0.12/GB-month. Egress included; Agent Drive and egress gateways/proxy free during beta.
- Card required: Not documented
- Source: https://blaxel.ai/pricing

## Runtime

- **GPU & accelerators**: No — "No GPU-backed sandbox offering found; custom hardware pricing does not establish GPU availability." [source](https://docs.blaxel.ai/Sandboxes/Overview) (confidence: low)
- **BYOC (Bring your own cloud)**: Custom plan advertises bring your own compute; implementation and supported customer clouds undisclosed. [source](https://blaxel.ai/pricing)
- **Secrets management**: Environment secrets and on-the-wire proxy credential injection. [source](https://docs.blaxel.ai/Sandboxes/Variables-and-secrets)
- **Storage options**: Read-only EROFS image plus RAM tmpfs writable layer, roughly 50% RAM reserved when possible; durable volumes and shared Agent Drive; Carbon does not yet support Agent Drive. [source](https://docs.blaxel.ai/Sandboxes/Overview)
- **Supported workloads**: untrusted code execution, coding agents, application previews, data analysis, background agents [source](https://docs.blaxel.ai/Sandboxes/Overview)
- **Persistence**: Standby preserves filesystem, memory and running processes indefinitely; volumes persist independently. Deletion erases sandbox data. [source](https://docs.blaxel.ai/Sandboxes/Overview)
- **Data jurisdiction**: US legal entity; selectable US, UK and Germany workload locations. Privacy policy describes EU/UK-US transfers. [source](https://compliance.blaxel.ai/en/documents/privacy-policy)
- **Resource limits & quotas**: Tier 0 10 sandboxes; $20 top-up tier 1 50; $50 top-up tier 2 200; contact tier 9 100,000+. Custom up to 256 GB RAM. Top-ups are wallet funds, not flat fees; trailing 30-day top-up controls tier. Idle connection timeout 15 minutes. [source](https://blaxel.ai/pricing)
- **SDK languages**: Python, TypeScript, Go [source](https://docs.blaxel.ai/sdk-reference/introduction)
- **Network & egress controls**: Proxy domain/method/path policy; network-level firewall enforcement on Mark 3.0. Dedicated egress IPs. Carbon currently lacks firewall and dedicated egress IP features. [source](https://docs.blaxel.ai/Infrastructure/Gens)
- **Snapshots & forks**: Automatic full-state standby snapshots; manual snapshots, rollback and forks on Carbon are private preview, not recommended for production. [source](https://docs.blaxel.ai/Sandboxes/Fork)
- **Deployment methods**: dockerfile, container-image, cli, sdk, api, dashboard, template [source](https://docs.blaxel.ai/Sandboxes/Overview)
- **Isolation**: Virtual machine — "Mark 3.0 default uses microVMs; no specific hypervisor named in retained docs. Carbon is private preview, not a second selectable isolation boundary." [source](https://docs.blaxel.ai/Infrastructure/Gens) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "Blaxel offers open source agent skills to help coding agents autonomously spin up and manage sandboxes on Blaxel" [source](https://docs.blaxel.ai/skills-mcp) |
| AI app builder | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Autonomous QA agent | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Built-in coding agent | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| BYOK for LLMs | Not supported | "Adjacent platform MCP hosting/model gateway offerings are not treated as first-party capabilities of the scoped Sandboxes SKU; user code can consume or host tools independently." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Credential-injection proxy | Supported | "inject secrets, and configure per-domain firewalls" [source](https://docs.blaxel.ai/Sandboxes/Proxy) |
| LLM gateway | Not supported | "Adjacent platform MCP hosting/model gateway offerings are not treated as first-party capabilities of the scoped Sandboxes SKU; user code can consume or host tools independently." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| MCP client | Not supported | "Adjacent platform MCP hosting/model gateway offerings are not treated as first-party capabilities of the scoped Sandboxes SKU; user code can consume or host tools independently." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| MCP-server hosting | Not supported | "Adjacent platform MCP hosting/model gateway offerings are not treated as first-party capabilities of the scoped Sandboxes SKU; user code can consume or host tools independently." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| MCP server | Supported | "Every Blaxel sandbox also exposes its own built-in MCP server, hosted via streamable HTTP at https://<SANDBOX_BASE_URL>/mcp" [source](https://docs.blaxel.ai/skills-mcp) |
| Model inference API (first-party) | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Preinstalled coding agent | Not supported | "Tutorial installs/runs third-party agent with user scripts; no platform-preinstalled agent image established." [source](https://docs.blaxel.ai/Tutorials/Claude-Code) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "https://tkmu0oj2bf6iuoag6mmlt8.us-pdx-1.preview.bl.run" [source](https://docs.blaxel.ai/Sandboxes/Preview-url) |
| Custom domains | Partially supported | "Higher tiers have access to gated features such as custom domains, dedicated IPs and more." [source](https://docs.blaxel.ai/Security/Quotas) |
| Direct public IPv6 | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Edge KV store | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Egress controls | Supported | "Restrict which external domains, HTTP methods, and URL paths a Blaxel sandbox can reach using allowlists and denylists" [source](https://docs.blaxel.ai/Sandboxes/Proxy-domains) |
| Email send / receive | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Public preview URLs | Supported | "This preview URL can be either public or private." [source](https://docs.blaxel.ai/Sandboxes/Preview-url) |
| Private networking | Partially supported | "Custom: Private network connectivity" [source](https://blaxel.ai/pricing) |
| Built-in reverse proxy | Supported | "preview URL that routes to a specific port on your sandbox" [source](https://docs.blaxel.ai/Sandboxes/Preview-url) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Partially supported | "When you create a private preview URL a token is required to access the URL." [source](https://docs.blaxel.ai/Sandboxes/Preview-url) |
| BYOC | Partially supported | "Custom: Bring your own compute; supported clouds and operating shape not described." [source](https://blaxel.ai/pricing) |
| Deploy into customers' VPCs | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Secrets management | Supported | "Configure environment variables and secrets in Blaxel sandboxes" [source](https://docs.blaxel.ai/Sandboxes/Variables-and-secrets) |
| Self-host / OSS core | Not supported | "Public repository provides image templates and in-guest sandbox-api local Docker development, not a self-hostable copy of the managed microVM run-destination." [source](https://github.com/blaxel-ai/sandbox) |
| Sharing | Supported | "This preview URL can be either public or private." [source](https://docs.blaxel.ai/Sandboxes/Preview-url) |
| SSO / SAML | Supported | "Configure SAML single sign-on and automated user provisioning via Directory Sync (SCIM)" [source](https://docs.blaxel.ai/Security/SSO-Directory-sync) |
| Teams | Supported | "Manage Blaxel workspaces, invite users, assign roles, and configure access control" [source](https://docs.blaxel.ai/Security/Workspace-access-control) |
| Workload identity | Not supported | "User/service-account OAuth credentials do not establish per-workload federation identity." [source](https://docs.blaxel.ai/Security/Access-tokens) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Step-by-step quickstart guide to install the Blaxel CLI, create a cloud sandbox, run processes, manage files" [source](https://docs.blaxel.ai/Get-started) |
| E2B-compatible API | Not supported | "Migration skill migrates sandbox code from E2B; this is not evidence of drop-in E2B endpoint compatibility." [source](https://docs.blaxel.ai/skills-mcp) |
| Filesystem API | Supported | "curl http://localhost:8080/filesystem/~" [source](https://raw.githubusercontent.com/blaxel-ai/sandbox/main/README.md) |
| Git deploy | Partially supported | "Official Blaxel GitHub Action: run bl deploy from GitHub workflow; not native push-triggered sandbox deployment." [source](https://docs.blaxel.ai/Security/Access-tokens) |
| HTTP data API | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| OpenAPI spec | Supported | "openapi: 3.0.0; sandbox filesystem/process API. Control-plane spec separately published in blaxel-ai/docs." [source](https://raw.githubusercontent.com/blaxel-ai/sandbox/main/sandbox-api/docs/openapi.yml) |
| Private container registry | Supported | "bl push to push the image to Blaxel's registry; it does not create a new sandbox deployment" [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Public API | Supported | "Blaxel APIs allow you to interact with all resources inside of and across your workspace(s)." [source](https://docs.blaxel.ai/api-reference/introduction) |
| SDK | Supported | "Python, TypeScript, and Go SDKs for Blaxel" [source](https://docs.blaxel.ai/sdk-reference/introduction) |
| SSH access | Partially supported | "Connect a Blaxel sandbox to your Tailscale tailnet so you can SSH into it from any authorized device" [source](https://docs.blaxel.ai/Tutorials/Tailscale) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Desktop / computer-use sandbox | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| GPU compute | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Live-state (memory) snapshots | Supported | "Memory state is maintained even after scaling down, including the running processes and entire filesystem." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Multi-region | Supported | "Oregon, North Virginia, London, Frankfurt; all regions are not necessarily available in self-service by default." [source](https://docs.blaxel.ai/Infrastructure/Regions) |
| Object storage | Supported | "Access an Agent Drive instance from S3-compatible clients using its HTTP endpoint, service account credentials, and SigV4 signing." [source](https://docs.blaxel.ai/Agent-drive/S3-endpoint) |
| Persistent disk | Supported | "Use volumes or Agent Drive when data needs to persist independently from the sandbox lifecycle." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Sandbox templates / custom images | Supported | "Create reusable sandbox images with pre-configured tools, languages, and frameworks using Dockerfiles." [source](https://docs.blaxel.ai/Sandboxes/Templates) |
| Scale to zero | Supported | "You are not charged for memory while a sandbox is in standby mode. However, you are charged for the storage of the snapshot and/or the volumes." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Selectable isolation runtime | Not supported | "Mark 3.0 default and Carbon preview share the microVM foundation; not alternative isolation runtime choices." [source](https://docs.blaxel.ai/Infrastructure/Gens) |
| Snapshots / forking | Partially supported | "This feature is currently in private preview and is not recommended for production use." [source](https://docs.blaxel.ai/Sandboxes/Fork) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Ephemeral instant DB (no-signup) | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| First-party database | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Vector search | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Built-in observability | Supported | "Full observability suite" [source](https://blaxel.ai/pricing) |
| Preview environments | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Scheduled tasks | Supported | "Run a command inside a Blaxel sandbox on a recurring cron schedule, a future datetime, or after a delay" [source](https://docs.blaxel.ai/Sandboxes/Schedules) |
| Project template marketplace | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |
| Durable workflows | Not supported | "Not found as a shipped capability of the scoped Sandboxes SKU across retained documentation index, sandbox guide, API, pricing and integrations; absence is not a proof of impossibility." [source](https://docs.blaxel.ai/Sandboxes/Overview) |

## Agent readiness

### Read: 11 of 11 signals present

11/11 signals (7 full, 4 partial)

- Llms txt: pass — "https://docs.blaxel.ai/llms.txt — Substantive documentation index; apex copy also rendered."
- Llms full txt: pass — "https://docs.blaxel.ai/llms-full.txt — Comprehensive 1,273,945-byte docs dump, retained pointer."
- Robots AI policy: partial — "https://blaxel.ai/robots.txt — Rendered HTTP 404: default allow, no explicit AI policy."
- JSON LD: partial — "https://blaxel.ai/ — Organization and WebSite only; no Product offers."
- Sitemap: pass — "https://blaxel.ai/sitemap-index.xml — Index links sitemap-0.xml with many public URLs; both rendered XML saved."
- Meta quality: pass — "https://blaxel.ai/ — Descriptive title, description, OpenGraph metadata in retained HTML."
- Markdown negotiation: pass — "https://docs.blaxel.ai/Sandboxes/Overview.md — Docs .md variants fetched as text/markdown; apex reader negotiated markdown but direct Python HTTP returned 403."
- Content efficiency: partial — "https://blaxel.ai/ — Rendered visible text/HTML bytes = 4.66%, using text outside scripts/styles."
- Docs discoverable: pass — "https://blaxel.ai/ — Docs navigation links quickstart, SDK and API reference."
- Pricing machine readable: pass — "https://blaxel.ai/pricing — Rendered rate tables contain per-unit rates, plans and quota tier top-up thresholds."
- Anti bot: partial — "https://blaxel.ai/ — Direct urllib apex requests returned HTTP 403; reader/foxcrawl succeeded. No persistent source block remains."

### Drive: 10 of 11 signals present

10/11 signals (8 full, 2 partial)

- Public API: pass — "https://docs.blaxel.ai/api-reference/introduction — REST auth, versioning and pagination documented."
- Openapi spec: pass — "https://raw.githubusercontent.com/blaxel-ai/sandbox/main/sandbox-api/docs/openapi.yml — Public valid OpenAPI document; docs configuration also links controlplane.yml."
- MCP server: pass — "https://docs.blaxel.ai/skills-mcp — Documented sandbox MCP endpoint and management MCP setup."
- SDK packages: pass — "https://docs.blaxel.ai/sdk-reference/introduction — Official Python, TypeScript and Go SDKs."
- Auth docs: pass — "https://docs.blaxel.ai/Security/Access-tokens — API key bearer and OAuth flows with scope/rotation."
- Agent self serve creds: partial — "https://docs.blaxel.ai/Security/Access-tokens — Initial credentials generated from console; subsequent service account OAuth does not make initial signup/key issuance programmatic."
- Webhooks: fail — "https://docs.blaxel.ai/llms.txt — OpenAI Agents webhook handler is customer integration, not first-party signed platform event webhooks."
- CLI tool: pass — "https://docs.blaxel.ai/Get-started — Official CLI install and bl login/deploy."
- Error model: pass — "https://docs.blaxel.ai/troubleshooting/error-codes — Structured JSON error code, action, retryable status and documentation fields."
- Rate limit docs: partial — "https://docs.blaxel.ai/Security/Quotas — Resource quota tiers documented; API request rate-limit response headers not established."
- Agent config: pass — "https://docs.blaxel.ai/skills-mcp — Plugin marketplace/agent skills plus management and sandbox MCP setup; multiple config surfaces."

## Coding harnesses

- Claude Code (Anthropic) — "Run Claude Code in a sandbox" [source](https://docs.blaxel.ai/Tutorials/Claude-Code)
- Codex CLI (OpenAI) — "Run Codex in a sandbox" [source](https://docs.blaxel.ai/Tutorials/Codex)
- Amp (Sourcegraph) — "Run Amp in a sandbox" [source](https://docs.blaxel.ai/Tutorials/Amp)
- OpenClaw (Peter Steinberger) — "Run OpenClaw on Blaxel" [source](https://docs.blaxel.ai/Tutorials/OpenClaw)

## Compliance & regions

- SOC 2 (type unspecified): certified (scope: hosted) — "SOC 2" [source](https://compliance.blaxel.ai/en)
- ISO/IEC 27001: certified (scope: hosted) — "ISO 27001 (2022)" [source](https://compliance.blaxel.ai/en)
- HIPAA: self-attested (scope: hosted) — "HIPAA" [source](https://compliance.blaxel.ai/en)
- GDPR: self-attested (scope: hosted) — "GDPR compliant" [source](https://blaxel.ai/)
- CCPA: self-attested (scope: hosted) — "CCPA compliant" [source](https://blaxel.ai/)
- Regions: us-pdx-1 (Oregon, US), us-was-1 (North Virginia, US), eu-lon-1 (London, UK), eu-fra-1 (Frankfurt, Germany)
- Regions note: Not all regions self-service by default; access may require contacting vendor. Region guide covers Mark 3; Carbon rollout varies by workspace and region.

## Company & presence

- Headquarters: San Francisco, US
- Privacy policy: https://compliance.blaxel.ai/en/documents/privacy-policy
- Terms of service: https://blaxel.ai/legal/terms/2025-12-10-blaxel-terms-and-conditions.pdf
- GitHub: https://github.com/blaxel-ai
- X: https://x.com/blaxelai
- LinkedIn: https://www.linkedin.com/company/blaxel-ai
- Discord: https://discord.gg/CsWKUZUHFQ
- Status: https://status.blaxel.ai/

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.