# sandbox-run

Run commands in a native Linux namespace sandbox

Source: https://wheredoirunthis.com/products/sandbox-run · JSON: https://wheredoirunthis.com/api/products/sandbox-run · Read on 2026-10-09

## At a glance

- Type: Sandbox
- Kind: Open source tool
- Isolation: Container
- Free tier: Not documented
- Starting price: Not disclosed
- GPU: Not documented
- Regions: Not disclosed
- Coverage: 3 of 61 assessed capabilities supported
- Agent readiness: read 5 of 8 signals, drive 1 of 6 signals

## Links

- Homepage: https://github.com/sandbox-utils/sandbox-run
- Docs: https://github.com/sandbox-utils/sandbox-run/blob/master/README.md
- Repository: https://github.com/sandbox-utils/sandbox-run

## Runtime

- **GPU & accelerators**: Optional host NVIDIA device passthrough; CUDA/PyTorch examples require explicit bind mounts. [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **BYOC (Bring your own cloud)**: Not documented [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Secrets management**: Sources and exports CWD .env; credentials are visible to the sandboxed workload. [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Storage options**: Host bind mounts; ROOT defaults to $PWD/.sandbox; CLEANUP removes ROOT after execution. [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Supported workloads**: Native Linux commands, Untrusted command-line applications, AI tools, Local CUDA inference with explicit GPU passthrough [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Persistence**: Read-write host CWD (unless HOME) and RW_BIND mounts persist; other unmounted state is lost on namespace termination. [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Data jurisdiction**: Not documented [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Resource limits & quotas**: Not documented [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **SDK languages**: Not documented [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Network & egress controls**: Optional slirp4netns --disable-host-loopback; no general egress allowlist documented. Host networking shared without slirp4netns or with PORTS=shared. [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Snapshots & forks**: No [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Deployment methods**: cli [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md)
- **Isolation**: Container — "unshare (util-linux) spawns a native OS namespace-based container; shared host kernel, not a VM." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Not supported | "No Agent skills capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| AI app builder | Not supported | "No AI app builder capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Autonomous QA agent | Not supported | "No Autonomous QA agent capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Built-in coding agent | Not supported | "No Built-in coding agent capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| BYOK for LLMs | Not supported | "No BYOK for LLMs capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Credential-injection proxy | Not supported | "No Credential-injection proxy capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| LLM gateway | Not supported | "No LLM gateway capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| MCP client | Not supported | "No MCP client capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| MCP-server hosting | Not supported | "No MCP-server hosting capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| MCP server | Not supported | "No MCP server capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Model inference API (first-party) | Not supported | "No Model inference API (first-party) capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Preinstalled coding agent | Not supported | "No Preinstalled coding agent capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Not supported | "No Automatic HTTPS capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Custom domains | Not supported | "No Custom domains capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Direct public IPv6 | Not supported | "No Direct public IPv6 capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Edge KV store | Not supported | "No Edge KV store capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Egress controls | Partially supported | "Set SLIRP4NETNS_ARGS=--disable-host-loopback to disable this gateway." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Email send / receive | Not supported | "No Email send / receive capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Public preview URLs | Not supported | "No Public preview URLs capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Private networking | Not supported | "No Private networking capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Built-in reverse proxy | Not supported | "No Built-in reverse proxy capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "No Built-in auth capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| BYOC | Not applicable | "No BYOC capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Deploy into customers' VPCs | Not applicable | "No Deploy into customers' VPCs capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Secrets management | Partially supported | "File $PWD/.env (dotenv) is respected, sourced, and exported to the sandbox environment." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Self-host / OSS core | Supported | "Download the script and put it somewhere on PATH." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Sharing | Not supported | "No Sharing capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| SSO / SAML | Not supported | "No SSO / SAML capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Teams | Not supported | "No Teams capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Workload identity | Not supported | "No Workload identity capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "sandbox-run scary-app args" [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| E2B-compatible API | Not supported | "No E2B-compatible API capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Filesystem API | Not supported | "No Filesystem API capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Git deploy | Not supported | "No Git deploy capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| HTTP data API | Not supported | "No HTTP data API capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| OpenAPI spec | Not supported | "No OpenAPI spec capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Private container registry | Not applicable | "No Private container registry capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Public API | Not supported | "No Public API capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| SDK | Not supported | "No SDK capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| SSH access | Not supported | "No SSH access capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "No Cloud-init / ignition config capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Desktop / computer-use sandbox | Not supported | "No Desktop / computer-use sandbox capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| GPU compute | Partially supported | "Use NVIDIA for CUDA/compute by exposing the various device handles." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Live-state (memory) snapshots | Not supported | "No Live-state (memory) snapshots capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Multi-region | Not applicable | "No Multi-region capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Object storage | Not supported | "No Object storage capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Persistent disk | Supported | "The current working directory ($PWD) is mounted with read-write permissions; RW_BIND adds durable host mounts." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Sandbox templates / custom images | Not supported | "No Sandbox templates / custom images capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Scale to zero | Not supported | "No Scale to zero capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Selectable isolation runtime | Not supported | "No Selectable isolation runtime capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Snapshots / forking | Not supported | "No Snapshots / forking capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "No Database branching capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Ephemeral instant DB (no-signup) | Not supported | "No Ephemeral instant DB (no-signup) capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| First-party database | Not supported | "No First-party database capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Vector search | Not supported | "No Vector search capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not applicable | "No Managed CI/CD runners capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Built-in observability | Partially supported | "If environment variable VERBOSE= is set to a non-empty value, verbose/debug program output is emitted to stderr upon execution." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Preview environments | Not supported | "No Preview environments capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Scheduled tasks | Not supported | "No Scheduled tasks capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Project template marketplace | Not supported | "No Project template marketplace capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |
| Durable workflows | Not supported | "No Durable workflows capability documented in the repository README or published file tree." [source](https://github.com/sandbox-utils/sandbox-run/blob/master/README.md) |

## Agent readiness

### Read: 5 of 8 signals present

5/8 signals (3 full, 2 partial)

- Llms txt: fail — "Repository tree has no llms.txt or docs links to one."
- Llms full txt: fail — "Repository tree has no llms-full.txt."
- Robots AI policy: na — "No product-owned domain; GitHub policy is not vendor policy."
- JSON LD: fail — "Fetched repository HTML contains no application/ld+json script."
- Sitemap: na — "Single GitHub repository; no product-owned website sitemap."
- Meta quality: pass — "Repository HTML has descriptive title, description and Open Graph metadata."
- Markdown negotiation: partial — "README.md available as raw Markdown through GitHub; not homepage content negotiation."
- Content efficiency: partial — "Fetched HTML: 340274 bytes; extracted text: 12713 bytes (3.74%)."
- Docs discoverable: pass — "README installation, usage and networking documentation rendered on repository landing page."
- Pricing machine readable: na — "Self-host only; no hosted tiers."
- Anti bot: pass — "Public repository HTML fetched HTTP 200; README and tree fetched successfully via GitHub API."

### Drive: 1 of 6 signals present

1/6 signals (1 full, 0 partial)

- Public API: fail — "No corresponding API/spec/MCP/SDK/agent configuration published in README or repository tree."
- Openapi spec: fail — "No corresponding API/spec/MCP/SDK/agent configuration published in README or repository tree."
- MCP server: fail — "No corresponding API/spec/MCP/SDK/agent configuration published in README or repository tree."
- SDK packages: fail — "No corresponding API/spec/MCP/SDK/agent configuration published in README or repository tree."
- Auth docs: na — "Local tool has no hosted API/authentication endpoint."
- Agent self serve creds: na — "Local tool has no hosted API/authentication endpoint."
- Webhooks: na — "Local tool has no hosted API/authentication endpoint."
- CLI tool: pass — "Official sandbox-run CLI documented in README."
- Error model: na — "Local tool has no hosted API/authentication endpoint."
- Rate limit docs: na — "Local tool has no hosted API/authentication endpoint."
- Agent config: fail — "No corresponding API/spec/MCP/SDK/agent configuration published in README or repository tree."

## Open source

- Repository: https://github.com/sandbox-utils/sandbox-run
- License: AGPL-3.0
- Stars: 86
- Forks: 6
- Self-host methods: other
- Self-host dependencies: linux, posix-shell, coreutils, util-linux, mount

## Company & presence

- GitHub: https://github.com/sandbox-utils/sandbox-run

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.