# PandaStack

The cloud for AI agents.

Source: https://wheredoirunthis.com/products/pandastack · JSON: https://wheredoirunthis.com/api/products/pandastack · Read on 2026-10-15

## At a glance

- Type: Sandbox
- Kind: Open core
- Isolation: Firecracker microVM
- Free tier: Yes
- Starting price: $20/mo
- GPU: No
- Regions: Not disclosed
- Coverage: 31 of 61 assessed capabilities supported
- Agent readiness: read 9 of 11 signals, drive 10 of 11 signals

## Links

- Homepage: https://www.pandastack.ai/
- Docs: https://docs.pandastack.ai/
- Pricing: https://www.pandastack.ai/pricing/
- Repository: https://github.com/pandastack-io/pandastack-ai

## Pricing

- Model: Usage-based with monthly credit; paid base converts 1:1 to credit.
- Unit: Active vCPU-seconds, resident working-set GiB-seconds, provisioned GiB-month storage beyond quota.
- Free tier: Yes

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Free | $0/month; $5.40 usage credit, paused when exhausted | $5.40 monthly usage credit. 5 concurrent; 4GiB/sandbox; 2 sustained cores; 60 creates/hour; 1h lifetime, apps/DB exempt. | Monthly pricing. Paid base is 1:1 usage credit; bill max(base, metered spend), not base plus all usage. Free pauses rather than bills beyond credit. [source](https://api.pandastack.ai/v1/pricing) |
| Pro | $20/month + usage above credit | $20.00 monthly usage credit. 50 concurrent; 16GiB/sandbox; 600 creates/hour; 7-day idle TTL; 10 volumes each up to 10GiB. | Monthly pricing. Paid base is 1:1 usage credit; bill max(base, metered spend), not base plus all usage. Free pauses rather than bills beyond credit. [source](https://api.pandastack.ai/v1/pricing) |
| Team | $99/month + usage above credit | $99.00 monthly usage credit. 500 concurrent; 64GiB/sandbox; 6000 creates/hour; 30-day idle TTL; unlimited seats; 50 volumes each up to 50GiB. | Monthly pricing. Paid base is 1:1 usage credit; bill max(base, metered spend), not base plus all usage. Free pauses rather than bills beyond credit. [source](https://api.pandastack.ai/v1/pricing) |
| Enterprise | Custom annual contract | BYO-VPC / dedicated tenancy, custom quotas, SAML/SCIM/OIDC, audit streaming and advertised 99.95% SLA. |  [source](https://www.pandastack.ai/pricing/) |

- Card required: No
- Source: https://www.pandastack.ai/pricing/

## Website design

Desktop public website · assessed 2026-10-15

Complete assessment.

Desktop public landing, pricing and documentation entrance share pale backgrounds, dark oversized headings, generous whitespace, rounded panels and purple accents. Landing and docs add faint technical grids and gradient-highlighted headline words; pricing uses a centered introduction and four aligned plan cards. Coverage is limited to these public entry viewports, not authenticated product UI or documentation article layouts.

- Styles: Corporate, Technical illustration
- Landing page: captured
- Pricing: captured
- Docs: captured

## Runtime

- **GPU & accelerators**: No GPU-backed offering found in public templates, pricing or API docs. [source](https://docs.pandastack.ai/docs/templates/overview/)
- **BYOC (Bring your own cloud)**: Enterprise BYO-VPC / dedicated single-tenant; self-host core independently available. [source](https://www.pandastack.ai/pricing/)
- **Secrets management**: App environment secrets encrypted AES-256-GCM, masked in API reads and logs, injected at build/run time. [source](https://www.pandastack.ai/security/)
- **Storage options**: Host-local named ext4 volumes, snapshots and managed PostgreSQL 16. Free 1GiB, Pro 100GiB, Team 2500GiB included volume quotas. [source](https://docs.pandastack.ai/docs/volumes/overview/)
- **Supported workloads**: untrusted-code, agent-sandboxes, code-interpreter, browser-automation, git-hosted-apps, managed-postgres, serverless-functions, cron [source](https://www.pandastack.ai/)
- **Persistence**: Ephemeral sandbox rootfs; durable named ext4 volumes and managed PostgreSQL; hibernation retains VM state. [source](https://docs.pandastack.ai/docs/volumes/overview/)
- **Data jurisdiction**: Terms governed by Delaware, USA; infrastructure may process data internationally, including the United States. No concrete region catalog found. [source](https://www.pandastack.ai/terms/)
- **Resource limits & quotas**: Free: 5 concurrent sandboxes, 4GiB per sandbox, 60 creates/hour, 1-hour sandbox lifetime, 1GiB volume quota. Pro: 50 concurrent, 16GiB per sandbox, 600 creates/hour, 7-day idle TTL, 100GiB total volume quota (10 × 10GiB). Team: 500 concurrent, 64GiB per sandbox, 6000 creates/hour, 30-day idle TTL, 2500GiB total volume quota (50 × 50GiB). Enterprise: custom quotas. Complete machine-readable catalog retained in artifacts/live-pricing.json. [source](https://api.pandastack.ai/v1/pricing)
- **SDK languages**: python, typescript, javascript [source](https://docs.pandastack.ai/docs/sdk/python/)
- **Network & egress controls**: Hosted per-sandbox egress otherwise open; self-host operator can configure blocked TCP ports via PANDASTACK_BLOCKED_EGRESS_PORTS. [source](https://docs.pandastack.ai/docs/internals/networking/)
- **Snapshots & forks**: Snapshot/restore, disk-only fork(), live-state fork_tree, pause/resume and hibernate/wake. [source](https://www.pandastack.ai/llms.txt)
- **Deployment methods**: api, sdk, cli, git-push, dockerfile [source](https://docs.pandastack.ai/docs/apps/overview/)
- **Isolation**: Firecracker microVM [source](https://www.pandastack.ai/security/)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Not supported | "Capture observation: no documented agent-skills capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| AI app builder | Not supported | "Capture observation: no documented app-builder capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Autonomous QA agent | Not supported | "Capture observation: no documented autonomous-qa-agent capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Built-in coding agent | Not supported | "Capture observation: no documented built-in-agent capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| BYOK for LLMs | Supported | "Pick one via its API key." [source](https://docs.pandastack.ai/docs/templates/overview/) |
| Credential-injection proxy | Not supported | "Capture observation: no documented credential-injection-proxy capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| LLM gateway | Not supported | "Capture observation: no documented llm-gateway capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| MCP client | Not supported | "Capture observation: no documented mcp-client capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| MCP-server hosting | Supported | "MCP code-execution server — expose a run_code tool over the Model Context Protocol" [source](https://docs.pandastack.ai/docs/agents/overview/) |
| MCP server | Supported | "A built-in JSON-RPC endpoint that lets Claude Desktop, Cursor, mcp-cli, and other MCP clients drive any sandbox as a tool." [source](https://docs.pandastack.ai/docs/agents/mcp/) |
| Model inference API (first-party) | Not supported | "Capture observation: no documented model-inference-api capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Preinstalled coding agent | Supported | "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "TLS is issued and renewed automatically. Subdomains and apex domains supported." [source](https://docs.pandastack.ai/docs/apps/custom-domains/) |
| Custom domains | Supported | "TLS is issued and renewed automatically. Subdomains and apex domains supported." [source](https://docs.pandastack.ai/docs/apps/custom-domains/) |
| Direct public IPv6 | Not supported | "Capture observation: no documented direct-ipv6 capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Edge KV store | Not supported | "Capture observation: no documented edge-kv capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Egress controls | Partially supported | "PANDASTACK_BLOCKED_EGRESS_PORTS" [source](https://docs.pandastack.ai/docs/internals/networking/) |
| Email send / receive | Not supported | "Capture observation: no documented email-send-receive capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Public preview URLs | Supported | "A sandbox preview URL is reachable by anyone holding the URL for the lifetime of that sandbox" [source](https://www.pandastack.ai/security/) |
| Private networking | Not supported | "Capture observation: no documented private-networking capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Built-in reverse proxy | Supported | "DNAT" [source](https://docs.pandastack.ai/docs/internals/networking/) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "Capture observation: no documented built-in-auth capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| BYOC | Partially supported | "BYO-VPC / dedicated single-tenant" [source](https://www.pandastack.ai/pricing/) |
| Deploy into customers' VPCs | Not supported | "Capture observation: no documented customer-vpc-deploy capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Secrets management | Supported | "Environment variables and secrets you set on an app are encrypted with AES-256-GCM before storage" [source](https://www.pandastack.ai/security/) |
| Self-host / OSS core | Supported | "The core is Apache-2.0. You bring machines, networking, observability, and any cloud costs." [source](https://www.pandastack.ai/pricing/) |
| Sharing | Supported | "the identifier is the credential." [source](https://www.pandastack.ai/security/) |
| SSO / SAML | Partially supported | "SAML SSO + SCIM + OIDC" [source](https://www.pandastack.ai/pricing/) |
| Teams | Supported | "5 org seats" [source](https://www.pandastack.ai/pricing/) |
| Workload identity | Not supported | "Capture observation: no documented workload-identity capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "PandaStack" [source](https://docs.pandastack.ai/docs/sdk/cli/) |
| E2B-compatible API | Not supported | "Capture observation: no documented e2b-compatible-api capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Filesystem API | Supported | "read_file , write_file , and list_dir tools wired to a real Linux microVM." [source](https://docs.pandastack.ai/docs/agents/mcp/) |
| Git deploy | Supported | "Git-push deploys, blue-green, $0 while idle." [source](https://www.pandastack.ai/pricing/) |
| HTTP data API | Supported | "REST query broker (HTTP)" [source](https://docs.pandastack.ai/docs/databases/overview/) |
| OpenAPI spec | Supported | "Machine-readable OpenAPI 3.1 description of the full PandaStack REST API" [source](https://docs.pandastack.ai/docs/reference/openapi/) |
| Private container registry | Partially supported | "the image is pushed to PandaStack's private registry." [source](https://docs.pandastack.ai/docs/templates/overview/) |
| Public API | Supported | "Authorization: Bearer $PANDASTACK_API_KEY" [source](https://docs.pandastack.ai/docs/reference/rest-api/) |
| SDK | Supported | "SDKs: Python (pandastack), TypeScript (@pandastack/sdk), and a CLI." [source](https://www.pandastack.ai/llms.txt) |
| SSH access | Supported | "sandbox ssh" [source](https://docs.pandastack.ai/docs/sdk/cli/) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "Capture observation: no documented cloud-init-config capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Desktop / computer-use sandbox | Not supported | "Capture observation: no documented desktop-sandbox capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| GPU compute | Not supported | "Capture observation: no documented gpu capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Live-state (memory) snapshots | Supported | "fork_tree restores N children with the parent's memory and disk" [source](https://www.pandastack.ai/llms.txt) |
| Multi-region | Partially supported | "running across a managed multi-region fleet" [source](https://github.com/pandastack-io/pandastack-ai) |
| Object storage | Not supported | "Capture observation: no documented object-storage capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Persistent disk | Supported | "Named, persistent ext4 block devices you can attach to sandboxes" [source](https://docs.pandastack.ai/docs/volumes/overview/) |
| Sandbox templates / custom images | Supported | "A custom template is just a Dockerfile plus a memory spec and a size limit." [source](https://docs.pandastack.ai/docs/templates/overview/) |
| Scale to zero | Supported | "Hibernation writes state to disk and stops active vCPU/RAM metering." [source](https://www.pandastack.ai/pricing/) |
| Selectable isolation runtime | Not supported | "Capture observation: no documented selectable-isolation-runtime capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Snapshots / forking | Supported | "plain fork() copies the disk only and cold-boots the child." [source](https://www.pandastack.ai/llms.txt) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Supported | "Branch a running database into an independent copy with a warm memory-forked cache" [source](https://github.com/pandastack-io/pandastack-ai) |
| Ephemeral instant DB (no-signup) | Not supported | "Capture observation: no documented ephemeral-instant-db capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| First-party database | Supported | "managed PostgreSQL 16 databases, each in its own microVM" [source](https://www.pandastack.ai/llms.txt) |
| Vector search | Supported | "pgvector, pg_stat_statements, pg_trgm, ltree, hstore, uuid-ossp, pgcrypto, unaccent (pre-installed)" [source](https://docs.pandastack.ai/docs/databases/overview/) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Capture observation: no documented managed-ci-runners capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Built-in observability | Supported | "Audit log and observability backed by Postgres and ClickHouse." [source](https://github.com/pandastack-io/pandastack-ai) |
| Preview environments | Supported | "An app and a database branch per pull request." [source](https://www.pandastack.ai/pricing/) |
| Scheduled tasks | Supported | "cron" [source](https://docs.pandastack.ai/docs/functions/schedules/) |
| Project template marketplace | Not supported | "Capture observation: no documented template-marketplace capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |
| Durable workflows | Not supported | "Capture observation: no documented workflows-durable capability found in the reviewed homepage, pricing, templates, API reference and repository capability comparison." [source](https://www.pandastack.ai/llms.txt) |

## Agent readiness

### Read: 9 of 11 signals present

9/11 signals (7 full, 2 partial)

- Llms txt: pass — "https://www.pandastack.ai/llms.txt — substantive product description, docs, pricing and self-host links."
- Llms full txt: fail — "https://www.pandastack.ai/llms-full.txt and docs-host variants returned 404 HTML, not a comprehensive text corpus."
- Robots AI policy: partial — "https://www.pandastack.ai/robots.txt — User-Agent: *; Allow: /; no named AI user-agent policy."
- JSON LD: pass — "https://www.pandastack.ai/ — Organization, WebSite and SoftwareApplication with description and offers."
- Sitemap: pass — "https://www.pandastack.ai/sitemap.xml — HTTP 200 substantive XML URL catalog, 172,342 bytes."
- Meta quality: pass — "https://www.pandastack.ai/ — descriptive title, description and Open Graph metadata."
- Markdown negotiation: fail — "Homepage and docs with Accept: text/markdown return HTML; quickstart.md returns 404."
- Content efficiency: pass — "Homepage readable text / HTML bytes measured 0.0528 (>5%); retained landing.html and text extraction."
- Docs discoverable: pass — "https://www.pandastack.ai/ — first-class docs navigation to https://docs.pandastack.ai/."
- Pricing machine readable: pass — "https://www.pandastack.ai/pricing/ — structured tier cards and public GET https://api.pandastack.ai/v1/pricing JSON."
- Anti bot: partial — "One Accept:text/markdown probe returned HTTP 403 browser_signature_banned; same URL succeeded with browser-like User-Agent and foxcrawl. Other public sources fetched. Intermittent public-path block, not persistent scan limitation."

### Drive: 10 of 11 signals present

10/11 signals (9 full, 1 partial)

- Public API: pass — "https://docs.pandastack.ai/docs/reference/rest-api/ — bearer-auth endpoint and operation reference."
- Openapi spec: pass — "https://api.pandastack.ai/openapi.json — HTTP 200 valid OpenAPI 3.1.0 JSON, 116 paths."
- MCP server: pass — "https://docs.pandastack.ai/docs/agents/mcp-server/ — documented hosted endpoint https://api.pandastack.ai/mcp plus per-sandbox JSON-RPC."
- SDK packages: pass — "https://docs.pandastack.ai/docs/sdk/python/ and sdk/typescript/ — official pandastack and @pandastack/sdk; advertised APIs not executed."
- Auth docs: pass — "https://docs.pandastack.ai/docs/reference/rest-api/ — JWT-only token endpoints and bearer-key workload endpoints documented."
- Agent self serve creds: partial — "https://docs.pandastack.ai/docs/reference/rest-api/ — POST /v1/me/tokens requires existing JWT; initial sign-in remains human, no verified unauthenticated programmatic signup."
- Webhooks: pass — "https://docs.pandastack.ai/docs/sandboxes/webhooks/ — endpoint registration, event types, retries and HMAC-SHA256 signature verification."
- CLI tool: pass — "https://docs.pandastack.ai/docs/sdk/cli/ — official pandastack CLI documented; stale local build path separately flagged."
- Error model: pass — "https://docs.pandastack.ai/docs/reference/errors/ — JSON error string, HTTP code table and contextual quota fields."
- Rate limit docs: pass — "https://docs.pandastack.ai/docs/reference/errors/ — 50 burst / 25 per second per workspace, Retry-After: 1; hourly create limits in live tier JSON."
- Agent config: fail — "GET /agents.md and /.well-known/agent returned 404. No installable agent configuration/skills listing found in reviewed llms/docs/repo sources."

## Coding harnesses

- Claude Code (Anthropic) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- Codex CLI (OpenAI) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- OpenCode (opencode) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- Amp (Sourcegraph) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- Gemini CLI (Google) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- GitHub Copilot (GitHub) — "Every terminal coding agent with a public CLI, in one image: claude , codex , opencode , amp , grok , gemini , copilot ." [source](https://docs.pandastack.ai/docs/templates/overview/)
- Cursor (Anysphere) — "Claude Desktop, Cursor, mcp-cli, and other MCP clients" [source](https://docs.pandastack.ai/docs/agents/mcp/)

Plausible compatibility (derived, not stored):

- Aider
- Antigravity
- Devin
- Droid
- Goose
- Hermes Agent
- Kilo Code
- Kiro CLI
- Pi
- Qwen Code

## Compliance & regions

- GDPR: self-attested (scope: hosted) — "We act as a processor for Customer Content" [source](https://www.pandastack.ai/security/)
- CCPA: self-attested (scope: hosted) — "We do not sell personal information" [source](https://www.pandastack.ai/security/)
- PCI DSS: self-attested (scope: hosted) — "we self-assess annually under SAQ A" [source](https://www.pandastack.ai/security/)
- Regions note: Privacy policy and repository describe multiple regions but no verified selectable hosted region names or locations were found. Self-host Terraform examples are not a hosted region catalog.

## Open source

- Repository: https://github.com/pandastack-io/pandastack-ai
- License: Apache-2.0
- Stars: 33
- Forks: 5
- Self-host methods: source-build, terraform, ansible
- Self-host dependencies: postgres, clickhouse, object-storage

## Company & presence

- Founded: 2025-05-13
- Privacy policy: https://www.pandastack.ai/privacy/
- Terms of service: https://www.pandastack.ai/terms/
- GitHub: https://github.com/pandastack-io/pandastack-ai
- Discord: https://discord.gg/GzxpkHPD
- X: https://x.com/pandastackai
- Blog: https://www.pandastack.ai/blog/
- Changelog: https://www.pandastack.ai/changelog/

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.