# Runtime

Linux sandboxes for AI agents

Source: https://wheredoirunthis.com/products/runtime · JSON: https://wheredoirunthis.com/api/products/runtime · Read on 2026-10-15

## At a glance

- Type: Sandbox
- Kind: Hosted
- Isolation: Firecracker microVM
- Free tier: Yes
- Starting price: Not disclosed
- GPU: No
- Regions: 1
- Coverage: 30 of 61 assessed capabilities supported
- Agent readiness: read 11 of 11 signals, drive 10 of 11 signals

## Links

- Homepage: https://withruntime.com/
- Docs: https://withruntime.com/docs
- Pricing: https://withruntime.com/pricing

## Pricing

- Model: prepaid usage-based
- Unit: active vCPU-hour + reserved GiB-hour; storage and network separately metered
- Free tier: Yes

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Prepaid usage (no plan tiers) | No plan fee; CPU $0.025/active vCPU-hour + memory $0.0075/GiB-hour | Memory quantity is GiB-hours, not decimal GB-hours. Compute allowance once during initial 30 days before paying, then monthly only after credit purchase. 100 GiB outbound/month = 107.3741824 decimal GB (unit conversion). Monthly saved copies 10 decimal GB + volume 5 decimal GB; first three images and first 10 GiB volumes free for lifetime. | Min top-up $10, max $10000. No subscription; base period null because no subscription period. Limits change with credit/payment status, not price tiers. Welcome match first 30 days capped $1000; startups allowance requires application and is one-time, not standard tier. memory_gb_hours uses the published GiB-hour unit (explicit convention), not an unlabelled decimal-GB conversion. [source](https://withruntime.com/pricing) |

- Overages: CPU $0.025/active vCPU-hour; memory $0.0075/reserved GiB-hour; outbound above 100 GiB/month $0.02/decimal GB; separate storage rates
- Card required: No
- Source: https://withruntime.com/pricing

## Website design

Desktop public website · assessed 2026-10-15

Complete assessment.

A restrained, near-monochrome desktop website pairs large, tightly tracked sans-serif headlines with generous whitespace, rounded surfaces and pill-shaped controls. The landing page uses a two-column illustrated comparison, pricing adopts a narrow editorial article and table, and documentation uses a sidebar with orderly card grids.

- Styles: Editorial minimalism, Swiss-inspired
- Landing page: captured
- Pricing: captured
- Docs: captured

## Runtime

- **GPU & accelerators**: No [source](https://withruntime.com/docs/sandbox-environment) (confidence: medium)
- **BYOC (Bring your own cloud)**: No [source](https://withruntime.com/about) (confidence: medium)
- **Secrets management**: Host-side HTTPS proxy swaps placeholders for credentials only on approved hosts; sandbox never receives the real value. [source](https://withruntime.com/docs/security)
- **Storage options**: Persistent sandbox disk, attachable volumes with daily/on-demand off-server backups, kept snapshots copied off-server; mount your own S3/R2/GCS buckets. [source](https://withruntime.com/docs/storage)
- **Supported workloads**: Agent-generated code execution, Persistent agent workspaces, Code interpretation, Desktop/browser automation, Sandbox-hosted MCP tools, Scheduled isolated jobs, Preview and web services [source](https://withruntime.com/docs)
- **Persistence**: Disk survives stop/restart; paid pause preserves RAM while credit lasts; independent volumes outlive sandboxes. [source](https://withruntime.com/docs/storage)
- **Data jurisdiction**: United States; Colorado law and Denver courts/arbitration [source](https://withruntime.com/legal/terms)
- **Resource limits & quotas**: Without credit: 4 concurrent, 2 vCPU/4 GiB/10 GiB disk each, 8 vCPU/16 GiB total, 10 retained sandboxes, 50 creates/day. Funded: 100 concurrent (200 with auto top-up), up to 16 vCPU/64 GiB/400 GiB disk each; 200 aggregate vCPU/400 GiB RAM, doubled with auto top-up. [source](https://withruntime.com/docs/limits)
- **SDK languages**: JavaScript, TypeScript, Python, Go, Ruby, Java [source](https://withruntime.com/docs)
- **Network & egress controls**: Per-sandbox allow/deny rules and internet-off; default public-network restrictions; dedicated outbound IP with funded account. [source](https://withruntime.com/docs/security)
- **Snapshots & forks**: Forks and snapshots retain files, memory and running processes; 1–10 running fork copies. [source](https://withruntime.com/llms.txt)
- **Deployment methods**: api, cli, sdk, mcp, dockerfile, oci-image [source](https://withruntime.com/docs/images)
- **Isolation**: Firecracker microVM [source](https://withruntime.com/docs/sandbox-environment)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "and run the code it writes in a Runtime sandbox. Every integration below is ready to install. Each runs in its framework's own agent loop, was tested against real sandboxes, and keeps your model, prompts and application as they are. — Framework tool integrations are installable tools, not evidence of an AGENTS.md/skill discovery file." [source](https://withruntime.com/docs/frameworks) |
| AI app builder | Not supported | "vs Runloop Runtime vs Vercel Start free, no card Let your coding agent handle the setup. Sign up, then paste the setup prompt into your coding agent. Start free, no card Copy agent prompt Copy agent prompt Sear — Existing external coding agent sets up the sandbox; no first-party prompt-to-app builder found." [source](https://withruntime.com/docs) |
| Autonomous QA agent | Not supported | "page Markdown Use Runtime with your AI framework Keep your framework's model and agent loop, and run the code it writes in a Runtime sandbox. Every integration below is ready to install. Each runs in its framework's own agent loop, — Execution substrate, not a first-party autonomous QA agent." [source](https://withruntime.com/docs/frameworks) |
| Built-in coding agent | Not supported | "page Markdown Use Runtime with your AI framework Keep your framework's model and agent loop, and run the code it writes in a Runtime sandbox. Every integration below is ready to install. Each runs in its framework's own agent loop, — Bring your own agent/model; console resource assistant is not evidence of a first-party code-authoring harness." [source](https://withruntime.com/docs/frameworks) |
| BYOK for LLMs | Supported | "intf %s " $OPENAI_API_KEY " \| runtime secrets set OPENAI_API_KEY --host api.openai.com runtime secrets ls TypeScript import { Runtime } from "withruntime" ; const runtime = new Runtime (); await runtime.secrets. set ( "GITHUB_ — Provider keys are held by host proxy, not delivered into sandbox." [source](https://withruntime.com/docs/security) |
| Credential-injection proxy | Supported | "I_API_KEY , or an SDK that reads OPENAI_API_KEY . The host's proxy replaces the placeholder with the value in the credential header of HTTPS requests to the secret's hosts: Authorization , x-api-key , x-goog-api-key , api-key , xi-api-key , x-sub" [source](https://withruntime.com/docs/security) |
| LLM gateway | Not supported | "page Markdown Use Runtime with your AI framework Keep your framework's model and agent loop, and run the code it writes in a Runtime sandbox. Every integration below is ready to install. Each runs in its framework's own agent loop, — Credential proxy secures provider requests; no unified multi-provider inference gateway found." [source](https://withruntime.com/docs/frameworks) |
| MCP client | Not supported | "Docs / Build Copy page Markdown Runtime Cloud MCP Runtime's MCP server gives an agent every Runtime product as tools, with instructions on first contact, so it needs no wrapper code. MCP and the HTTPS API share authentication, ownership, spending checks an — Server and sandbox hosting do not establish a first-party MCP-consuming client." [source](https://withruntime.com/docs/mcp) |
| MCP-server hosting | Supported | "der in a sandbox (`runtime sandboxes mount`). - **MCP servers** from Runtime's catalog run in a sandbox at private URLs your agent connects to (`runtime sandboxes mcp`, runtime_sandboxes_mcp). - **Previews:** an HTTPS address" [source](https://withruntime.com/llms.txt) |
| MCP server | Supported | "CP over HTTP can skip the bridge. The endpoint is https://api.withruntime.com/mcp , over MCP Streamable HTTP. Sign in through the browser, with no key. Add the address as a custom connector or remote server, in Claude, Ch — Also documented npx -y withruntime mcp bridge; well-known/MCP absence is not absence of MCP." [source](https://withruntime.com/docs/mcp) |
| Model inference API (first-party) | Not supported | "page Markdown Use Runtime with your AI framework Keep your framework's model and agent loop, and run the code it writes in a Runtime sandbox. Every integration below is ready to install. Each runs in its framework's own agent loop, — No first-party model inference endpoint found." [source](https://withruntime.com/docs/frameworks) |
| Preinstalled coding agent | Not supported | "**Tools install the usual way** and run by name: `npm install -g @anthropic-ai/claude-code` (with or without `sudo`), `bun add -g`, `pip install` and `uv tool install` put their commands on `PATH`, and `pnpm` and `yarn` are there — User-installed harness/integration rather than verified preinstalled, credential-wired agent session." [source](https://withruntime.com/llms.txt) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "xes mcp`, runtime_sandboxes_mcp). - **Previews:** an HTTPS address for one port, private with a token you can rotate, on runtimehost.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived toke" [source](https://withruntime.com/llms.txt) |
| Custom domains | Supported | "paid one. Custom domain: a sandbox's web port at your own hostname, with HTTPS. TCP port: a public address:port for anything that is not HTTP, such as Postgres, Redis, MQTT or a game server. Dedicated outbound address: — Paid sandbox and kept top-up required." [source](https://withruntime.com/docs/networking) |
| Direct public IPv6 | Not supported | "ost $5 per 30-day month, prorated to funded time. IPv6, custom domains, TCP ports and joining a tailnet are included. See pricing . Updated October 11, 2026 On this page Private preview links Custom domains TCP ports Dedi — IPv6 belongs to dedicated outbound addressing; no per-workload public IPv6 verified." [source](https://withruntime.com/docs/networking) |
| Edge KV store | Not supported | "art 1 Get started Runtime Cloud gives your agents Linux sandboxes, billed on the CPU they use, and connects them with one browser approval. 2 Free usage Every account gets free usage, with no card, after a — No managed edge KV service found." [source](https://withruntime.com/docs) |
| Egress controls | Supported | "nt with a kept top-up reach any host on any port; per-sandbox allow and deny lists and internet off. With a kept top-up: custom domains with HTTPS (`runtime domains`), public TCP ports (`runtime ports`) and WireGuard private networks (`run" [source](https://withruntime.com/llms.txt) |
| Email send / receive | Not supported | "(telnet, Windows RPC, NetBIOS and SMB, IRC), and mail ports open only when support enables mail for your account. Private and internal addresses are refused. Code that retries one, such as a cloud SDK looking for credentials at the met — No first-party managed email send/receive primitive found; SMTP possible only after support enables ports." [source](https://withruntime.com/docs/security) |
| Public preview URLs | Supported | "). - **Previews:** an HTTPS address for one port, private with a token you can rotate, on runtimehost.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived token your own web page uses to run comma" [source](https://withruntime.com/llms.txt) |
| Private networking | Supported | "boxes by name: your sandboxes reach each other at <name>.sandbox.internal , free. It needs no tunnel: the CLI and MCP call it networks private ( runtime networks private on ), which is not the WireGuard private ne" [source](https://withruntime.com/docs/networking) |
| Built-in reverse proxy | Supported | "xes mcp`, runtime_sandboxes_mcp). - **Previews:** an HTTPS address for one port, private with a token you can rotate, on runtimehost.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived toke" [source](https://withruntime.com/llms.txt) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "t.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived token your own web page uses to run commands, use files and reach previews in one sandbox, with no API key and no proxy: `s — Workload-scoped session and preview tokens are infrastructure authorization; no app-end-user auth/IAM service found." [source](https://withruntime.com/llms.txt) |
| BYOC | Not supported | "ents: Firecracker microVMs with their own kernel, on servers we run. Fast: a new sandbox runs its first command 221 ms after the create request, timed on our servers (331 ms from a laptop). Cheaper: 42% to 8 — No customer-cloud control-plane deployment offering found." [source](https://withruntime.com/llms.txt) |
| Deploy into customers' VPCs | Not supported | "domains`), public TCP ports (`runtime ports`) and WireGuard private networks (`runtime networks wireguard`); with credit, a dedicated outbound IPv4 address with IPv6 (`runtime ips`). - **Identity tokens:** a short-li — Private connectivity into your network is not deployment into SaaS customers’ VPCs." [source](https://withruntime.com/llms.txt) |
| Secrets management | Supported | "ble on these terms. Secrets sandboxes never see # Store an API key once; your sandboxes use it without holding it. Each secret has a name, a value and the hosts it may go to. Terminal printf %s " $OPENAI_API_KEY " \| runtime secrets set OPENAI_API_KEY --" [source](https://withruntime.com/docs/security) |
| Self-host / OSS core | Not supported | "ents: Firecracker microVMs with their own kernel, on servers we run. Fast: a new sandbox runs its first command 221 ms after the create request, timed on our servers (331 ms from a laptop). Cheaper: 42% to 8 — SDKs and installable CLI do not establish an OSS self-hostable core." [source](https://withruntime.com/llms.txt) |
| Sharing | Supported | "). - **Previews:** an HTTPS address for one port, private with a token you can rotate, on runtimehost.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived token your own web page uses to run comma" [source](https://withruntime.com/llms.txt) |
| SSO / SAML | Supported | "etrics, signed webhooks and OpenTelemetry export. Single sign-on (SAML and OIDC) and SCIM, free on every account. - A desktop, a code interpreter and private preview URLs are built in. The current default image includes NumPy, pandas and matplotlib. ##" [source](https://withruntime.com/llms.txt) |
| Teams | Supported | "what you save each month. 4 Roll out to a company One Runtime account can hold your whole company: its people, their agents, one prepaid balance and one audit log. Build JavaScript One client for every Runtime Cloud product, for Node 22." [source](https://withruntime.com/docs) |
| Workload identity | Supported | "th IPv6 (`runtime ips`). - **Identity tokens:** a short-lived OIDC token that names the sandbox, so it can assume an AWS or Google Cloud role with no stored key (`runtime sandboxes identity-token`). - **Observability:** per-sandbox CPU" [source](https://withruntime.com/llms.txt) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "The runtime CLI · Runtime Skip to content Runtime Docs Search the docs ⌘K Pricing Start free, no card Menu Start Overview Get started Free usage Switch to" [source](https://withruntime.com/docs/cli) |
| E2B-compatible API | Partially supported | "Sandbox or Blaxel runs by changing the import to `withruntime/e2b`, `withruntime/daytona`, `withruntime/vercel` or `withruntime/blaxel` (Python `withruntime.e2b`, `withruntime.daytona`, `withruntime.vercel — Compatibility is offered through an import-replacement SDK adapter; no endpoint-only compatibility with an unchanged E2B SDK was verified." [source](https://withruntime.com/llms.txt) |
| Filesystem API | Supported | "thod and path What it does GET /v1/sandboxes/{id}/files/content?path= The file's raw bytes, any size; x-content-length gives the length first (and x-content-sha256 a small file's digest), so check it: a body t" [source](https://withruntime.com/docs/api) |
| Git deploy | Not supported | "ild logs Limits Pricing Build from a Dockerfile # Point the SDK or the CLI at a folder with a Dockerfile. The folder is the build context, exactly as with docker build : every file its .dockerignore leaves in is packed, and only the parts that — Image/context builds and git inside guest are not a documented git-push deployment primitive." [source](https://withruntime.com/docs/images) |
| HTTP data API | Not supported | "dress:port for anything that is not HTTP, such as Postgres, Redis, MQTT or a game server. Dedicated outbound address: every sandbox of your account sends from one address of its own, so you can allow-list it. Pr — No first-party HTTP database query service found." [source](https://withruntime.com/docs/networking) |
| OpenAPI spec | Supported | "e-readable one is the public OpenAPI document at `https://api.withruntime.com/v1/openapi.json`, generated from the same route definitions the server validates with. API version: **0.2.0**. ## Requests Send the key as a bearer token. — Live spec fetched successfully: OpenAPI 3.1.0, 0.2.0 API; bounded pointer retained." [source](https://withruntime.com/docs/api) |
| Private container registry | Not supported | "from a Dockerfile Build from an image or a recipe Private registries Names, versions and tags Move a sandbox to a new version Start and ready commands Fast starts Faster rebuilds Build machine Build logs Limi — Can pull authenticated external images; no hosted private image registry endpoint found." [source](https://withruntime.com/docs/images) |
| Public API | Supported | "cs / Build Copy page Markdown HTTPS API reference One API for every Runtime Cloud product, at https://api.withruntime.com . The SDKs, the CLI and MCP are thin layers over it. This page is the contract. The machine-readable one is" [source](https://withruntime.com/docs/api) |
| SDK | Supported | "d jobs and free single sign-on. API, CLI, MCP and SDKs for JavaScript, Python, Go, Ruby and Java. No person to sign in? An agent can open its own account and pay in USDC, with no browser and no card: see "No person? Open an account with" [source](https://withruntime.com/llms.txt) |
| SSH access | Supported | "over the API, with no port open to the internet: `runtime sandboxes ssh <id>`, `<id>.runtime` in VS Code or JetBrains after `runtime sandboxes ssh config --install`, and `runtime sandboxes port-forward <id> 5432` for — SSH tunneled over API; no public SSH port required." [source](https://withruntime.com/llms.txt) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "every sandbox from it. An image is built from any Dockerfile, from any public or private container image, or from a short recipe of packages. Each build of a name is its next version, tags such as lat — Custom image recipes are not documented cloud-init configuration." [source](https://withruntime.com/docs/images) |
| Desktop / computer-use sandbox | Supported | "`pnpm` and `yarn` are there through Corepack. - **Desktop** driven by clicks and keys, and a **code interpreter** in Python, JavaScript, TypeScript, R, Java, Bash or Go. - **Scheduled jobs:** a command in a fresh sandbox, onc" [source](https://withruntime.com/llms.txt) |
| GPU compute | Not supported | "Build Copy page Markdown The sandbox environment Every sandbox is a Firecracker microVM with its own Linux kernel and disk, with Python, Node.js, Bun, git and a compiler ready to use. This page says what is in the image, who yo — No GPU instance offering found." [source](https://withruntime.com/docs/sandbox-environment) |
| Live-state (memory) snapshots | Supported | ":** 1 to 10 running copies of a sandbox, with its files, memory and running processes. - **Custom images** from a package list, any public or private image, or a Dockerfile (multi-stage, with versions and tags). **Volumes** f" [source](https://withruntime.com/llms.txt) |
| Multi-region | Not supported | "ut.md. ## Why Runtime - **Fast.** Speed, timed on Runtime's servers in Virginia (the API's own time for each request, the way providers quote theirs; medians, 28 September 2026): a new sandbox is running 102 ms after th — Benchmark location is not a selectable multi-region offering; no second compute region found." [source](https://withruntime.com/llms.txt) |
| Object storage | Not supported | "ive the loss of the server they were made on, and your own buckets mount inside a sandbox without it ever holding their keys. A snapshot starts copying off its server once its final compressed form is ready; backedUp: true confir — BYO bucket mounts; no first-party managed bucket store found." [source](https://withruntime.com/docs/storage) |
| Persistent disk | Supported | "can attach a volume when creating a new sandbox. A stop keeps a sandbox's disk, so its volume stays attached until that sandbox is deleted. Spending and deletion ask for confirmation using the console agent's ex" [source](https://withruntime.com/docs/storage) |
| Sandbox templates / custom images | Supported | "m it. An image is built from any Dockerfile, from any public or private container image, or from a short recipe of packages. Each build of a name is its next version, tags such as latest and prod point at versions, and an image" [source](https://withruntime.com/docs/images) |
| Scale to zero | Supported | "is free, then $0.02 per GB (10⁹ bytes). A sandbox pauses itself after 60 seconds with nothing happening in it and bills only paused storage ($0.08 per GB (10⁹ bytes) per 30-day month) until the next request wakes it, wit — CPU/RAM billing stops on pause; paused storage remains billed, so not zero total storage cost." [source](https://withruntime.com/llms.txt) |
| Selectable isolation runtime | Not supported | "Build Copy page Markdown The sandbox environment Every sandbox is a Firecracker microVM with its own Linux kernel and disk, with Python, Node.js, Bun, git and a compiler ready to use. This page says what is in the image, who yo — No per-workload alternative isolation runtime exposed." [source](https://withruntime.com/docs/sandbox-environment) |
| Snapshots / forking | Supported | "ng while credit lasts. - **Forks and snapshots:** 1 to 10 running copies of a sandbox, with its files, memory and running processes. - **Custom images** from a package list, any public or private image, or a Dock" [source](https://withruntime.com/llms.txt) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "dress:port for anything that is not HTTP, such as Postgres, Redis, MQTT or a game server. Dedicated outbound address: every sandbox of your account sends from one address of its own, so you can allow-list it. Pr — No managed database branching found." [source](https://withruntime.com/docs/networking) |
| Ephemeral instant DB (no-signup) | Not supported | "dress:port for anything that is not HTTP, such as Postgres, Redis, MQTT or a game server. Dedicated outbound address: every sandbox of your account sends from one address of its own, so you can allow-list it. Pr — User-installed databases are not a first-party ephemeral DB product." [source](https://withruntime.com/docs/networking) |
| First-party database | Not supported | "dress:port for anything that is not HTTP, such as Postgres, Redis, MQTT or a game server. Dedicated outbound address: every sandbox of your account sends from one address of its own, so you can allow-list it. Pr — Examples are user-run TCP services, not a first-party managed DB." [source](https://withruntime.com/docs/networking) |
| Vector search | Not supported | "art 1 Get started Runtime Cloud gives your agents Linux sandboxes, billed on the CPU they use, and connects them with one browser approval. 2 Free usage Every account gets free usage, with no card, after a — No first-party vector index/search service found." [source](https://withruntime.com/docs) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Vercel AI SDK LangChain and LangGraph ComputeSDK Harbor and Terminal-Bench Inspect AI Understand Choosing a sandbox Pricing Limits Speed Referrals Security Security and compliance Single sign-on Teams and the audit — Benchmark integrations are not managed GitHub Actions/GitLab CI runners." [source](https://withruntime.com/docs/frameworks) |
| Built-in observability | Supported | "sandboxes identity-token`). - **Observability:** per-sandbox CPU and memory metrics, an event log, signed webhooks and OpenTelemetry export over OTLP/HTTP. - **Secrets** sandboxes use without seeing: a placeholder in the sandbox, the value added on HTTPS" [source](https://withruntime.com/llms.txt) |
| Preview environments | Not supported | "ntime sandboxes mcp`, runtime_sandboxes_mcp). - **Previews:** an HTTPS address for one port, private with a token you can rotate, on runtimehost.com, a domain kept apart from your account. - **Sandbox sessions:** a short-lived toke — Port preview URLs are not a Git/PR-scoped automated preview environment primitive." [source](https://withruntime.com/llms.txt) |
| Scheduled tasks | Supported | "on, and your own buckets mount in… Scheduled jobs A job runs a command in a fresh sandbox, once at a time you choose or on a cron schedule, and keeps each run's exit code and output. Metrics and webhooks See what a sandbox is doi — Scheduled jobs require credit; isolated run primitive, not durable workflow orchestration." [source](https://withruntime.com/docs) |
| Project template marketplace | Not supported | "ard Docs / Build Copy page Markdown Custom images Build an image once with your code and dependencies, then start every sandbox from it. An image is built from any Dockerfile, from any public or private container image, or from a short recip — Reusable compute images, not a starter app/project marketplace." [source](https://withruntime.com/docs/images) |
| Durable workflows | Not supported | "on, and your own buckets mount in… Scheduled jobs A job runs a command in a fresh sandbox, once at a time you choose or on a cron schedule, and keeps each run's exit code and output. Metrics and webhooks See what a sandbox is doi — One-off/cron jobs with retries do not establish durable workflow steps/replay." [source](https://withruntime.com/docs) |

## Agent readiness

### Read: 11 of 11 signals present

11/11 signals (9 full, 2 partial)

- Llms txt: pass — "https://withruntime.com/llms.txt — substantive product, SDK, docs and pricing index; retained."
- Llms full txt: pass — "https://withruntime.com/llms-full.txt — HTTP 200 text/plain; 964,093-byte documentation corpus; bounded pointer retained."
- Robots AI policy: partial — "https://withruntime.com/robots.txt — User-Agent: * Allow: /; no AI-specific named policy. /admin, /api/, /account disallowed."
- JSON LD: pass — "https://withruntime.com — SoftwareApplication Runtime Sandbox with description, featureList and Offer pricing; homepage-audit.json retains parsed JSON-LD."
- Sitemap: pass — "https://withruntime.com/sitemap.xml — substantive multi-page URL index, linked in robots.txt."
- Meta quality: pass — "https://withruntime.com — descriptive title, meta description and full OG URL/title/description/image/site metadata; actual HTML audit retained."
- Markdown negotiation: pass — "https://withruntime.com — Accept: text/markdown returns clean Markdown; https://withruntime.com/docs/api.md also returns Markdown. Default programmatic homepage response is itself Markdown."
- Content efficiency: partial — "https://withruntime.com — actual server HTML 268,656 bytes; extracted readable text 9,805 bytes; ratio 3.6496%, excluding scripts/styles. Default Markdown is not used as HTML denominator."
- Docs discoverable: pass — "https://withruntime.com — Docs first-class header navigation; landing screenshot and HTML show link."
- Pricing machine readable: pass — "https://withruntime.com/pricing — structured resource price table; source Markdown includes rates and allowances, not contact-only prose."
- Anti bot: pass — "Public landing, docs, pricing and linked API specification fetched without challenge. Sign-in/network-based free-usage restrictions are not blocks on public docs."

### Drive: 10 of 11 signals present

10/11 signals (10 full, 0 partial)

- Public API: pass — "https://withruntime.com/docs/api — documented versioned HTTPS API at https://api.withruntime.com."
- Openapi spec: pass — "https://api.withruntime.com/v1/openapi.json — fetched HTTP 200, valid OpenAPI 3.1.0; pointer and response metadata retained."
- MCP server: pass — "https://withruntime.com/docs/mcp — documented https://api.withruntime.com/mcp Streamable HTTP plus npx -y withruntime mcp bridge."
- SDK packages: pass — "https://withruntime.com/docs — official JavaScript/TypeScript, Python, Go, Ruby, Java SDK docs/packages."
- Auth docs: pass — "https://withruntime.com/docs/api and https://withruntime.com/docs/security — bearer tokens, sessions, owner/admin-only account-wide keys and scoped access; OAuth/device approval documented."
- Agent self serve creds: pass — "https://withruntime.com/docs/api — full-access owner/admin key can create/list/revoke /v1/keys. https://withruntime.com/llms.txt also documents paid wallet-only agent account creation; no purchase or account opening attempted."
- Webhooks: pass — "https://withruntime.com/docs/observability — Runtime-Signature: t=...,v1=...; HMAC-SHA256 of {t}.{body}, five-minute replay window and SDK verification."
- CLI tool: pass — "https://withruntime.com/docs/cli — official npx withruntime CLI with JSON output and product subcommands."
- Error model: pass — "https://withruntime.com/docs/api — structured error {code,status,message,details}; x-request-id and status/code taxonomy."
- Rate limit docs: pass — "https://withruntime.com/docs/api — about 50 requests/s per key, burst 200, per-account/in-flight limits; 429 Retry-After."
- Agent config: fail — "https://withruntime.com/agents.md and https://withruntime.com/.well-known/agent return HTML 404; no installable configuration/skill listing found in inspected docs. Framework tool SDKs and llms.txt are captured separately, not invented as these configuration discovery files."

## Coding harnesses

- Claude Code (Anthropic) — "Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI and any other MCP client connect to Runtime's own MCP server, which offers every Runtime product as tools." [source](https://withruntime.com/docs/frameworks)
- Codex CLI (OpenAI) — "Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI and any other MCP client connect to Runtime's own MCP server, which offers every Runtime product as tools." [source](https://withruntime.com/docs/frameworks)
- Cursor (Anysphere) — "Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI and any other MCP client connect to Runtime's own MCP server, which offers every Runtime product as tools." [source](https://withruntime.com/docs/frameworks)
- Windsurf (Codeium) — "Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI and any other MCP client connect to Runtime's own MCP server, which offers every Runtime product as tools." [source](https://withruntime.com/docs/frameworks)
- Gemini CLI (Google) — "Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI and any other MCP client connect to Runtime's own MCP server, which offers every Runtime product as tools." [source](https://withruntime.com/docs/frameworks)
- OpenCode (opencode) — "createRuntimeSandbox() runs Claude Code, Codex, OpenCode or Pi under HarnessAgent" [source](https://withruntime.com/docs/frameworks)
- Pi (earendil-works) — "createRuntimeSandbox() runs Claude Code, Codex, OpenCode or Pi under HarnessAgent" [source](https://withruntime.com/docs/frameworks)

Plausible compatibility (derived, not stored):

- Aider
- Amp
- Antigravity
- Devin
- Droid
- Goose
- Hermes Agent
- Kilo Code
- Kiro CLI
- Qwen Code

## Compliance & regions

- Note: Official trust page attributes certifications to infrastructure/data-center subprocessors, not Runtime LLC. Table column is "Their certifications, checked 27 September 2026"; sandbox data center has "SOC 1, SOC 2 and SOC 3 Type 2; ISO 27001". No provider-level held certification was established on reviewed official pages. Privacy promises SCC-based transfers. Do not promote supplier certifications into Runtime certified rows.
- Regions: Virginia (Virginia, United States)
- Regions note: Trust: Everything runs in one region, in Virginia, United States. Subprocessors identifies sandbox dedicated server provider as OVH US LLC (OVHcloud US). Legal jurisdiction Colorado, not a second compute region.

## Company & presence

- Privacy policy: https://withruntime.com/legal/privacy
- Terms of service: https://withruntime.com/legal/terms
- Official blog: https://withruntime.com/blog
- Changelog: https://withruntime.com/docs/changelog
- Public documentation: https://withruntime.com/docs

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.