# Zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking

Source: https://wheredoirunthis.com/products/zeroboot · JSON: https://wheredoirunthis.com/api/products/zeroboot · Read on 2026-10-12

## At a glance

- Type: Sandbox
- Kind: Open core
- Isolation: Firecracker microVM
- Free tier: Not documented
- Starting price: Not disclosed
- GPU: No
- Regions: Not disclosed
- Coverage: 7 of 61 assessed capabilities supported
- Agent readiness: read 5 of 6 signals, drive 6 of 11 signals

## Links

- Homepage: https://github.com/zerobootdev/zeroboot
- Docs: https://github.com/zerobootdev/zeroboot#docs
- Repository: https://github.com/zerobootdev/zeroboot

## Pricing

- Model: Managed API early access; no public rates or billing model disclosed.
- Free tier: Not documented

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Managed API (early access) | Undisclosed | README offers managed exec API and early-access waitlist; health reports Python/Node readiness. | No published plan or rates. Self-host is free under Apache-2.0 plus own infrastructure, not a hosted free tier. [source](https://github.com/zerobootdev/zeroboot) |

- Card required: Not documented
- Source: https://github.com/zerobootdev/zeroboot

## Runtime

- **GPU & accelerators**: No — "No GPU — KVM/serial-only architecture; none mentioned." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **BYOC (Bring your own cloud)**: No — "No managed BYOC-into-your-cloud; self-host (run the binary on your own KVM host) is the separate self-host option." [source](https://github.com/zerobootdev/zeroboot) (confidence: medium)
- **Secrets management**: none — API-key auth (Bearer zb_live_...) loaded from api_keys.json / env; no secrets management for workloads — "API keys gate the exec API; no secrets vault/injection for sandbox workloads." [source](https://github.com/zerobootdev/zeroboot) (confidence: medium)
- **Storage options**: No — "No persistent storage inside sandboxes — ephemeral fork only." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **Supported workloads**: ai-agent-code-execution — "Ephemeral AI-agent code execution — Python (numpy/pandas pre-loaded) + Node.js runtime templates; serial-I/O results." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **Persistence**: No — "Ephemeral only — fork, run, discard. No persistent storage (a fundamental constraint of the CoW-fork model)." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **Data jurisdiction**: Not documented — "No hosted jurisdiction or region disclosed; self-host placement belongs to the operator." [source](https://github.com/zerobootdev/zeroboot) (confidence: low)
- **Resource limits & quotas**: Single vCPU per fork; default execution timeout 30 seconds (request configurable); API docs specify 100 requests/second per API key. — "README lists single-vCPU/no-network limitations; API.md documents timeout_seconds default 30 and 100 req/s per key. Self-reported ~265KB RSS is a benchmark, not a guaranteed memory quota; hosted enforcement was not exercised." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/API.md) (confidence: medium)
- **SDK languages**: python, typescript — "Python SDK (zero deps) + TypeScript/Node SDK (zero deps, uses fetch)." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **Network & egress controls**: No — "Forks have NO networking at all (serial I/O only) — there is no outbound to control. Network isolation is total by architecture (deny-all), but it is not a configurable egress policy." [source](https://github.com/zerobootdev/zeroboot) (confidence: high)
- **Snapshots & forks**: Yes — "The whole point: template (Firecracker boot + snapshot, ~15s, one-time) → fork (KVM VM + CoW mmap + CPU-state restore in order, ~0.8ms) → execute via 16550 UART serial I/O. CoW via mmap(MAP_PRIVATE); untouched pages stay shared." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/ARCHITECTURE.md) (confidence: high)
- **Deployment methods**: api, sdk, cli — "Managed/self-host REST execution API; official Python/TypeScript clients; self-host CLI template/test-exec/bench/serve." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/DEPLOYMENT.md) (confidence: high)
- **Isolation**: Firecracker microVM — "ARCHITECTURE.md: each fork is a separate KVM VM using mmap(MAP_PRIVATE) on a shared Firecracker snapshot; hardware-enforced via Intel VT-x/AMD-V. Not containers/namespaces." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/ARCHITECTURE.md) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Not supported | "No agent-skills system." [source](https://github.com/zerobootdev/zeroboot) |
| AI app builder | Not supported | "No app builder." [source](https://github.com/zerobootdev/zeroboot) |
| Autonomous QA agent | Not supported | "No autonomous qa agent capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Built-in coding agent | Not supported | "No first-party coding agent — it's an exec primitive your agent calls." [source](https://github.com/zerobootdev/zeroboot) |
| BYOK for LLMs | Not applicable | "Not an LLM product." [source](https://github.com/zerobootdev/zeroboot) |
| Credential-injection proxy | Not applicable | "No networking inside forks. Sandboxes communicate via serial I/O only. An outbound credential proxy cannot apply to these guests." [source](https://github.com/zerobootdev/zeroboot) |
| LLM gateway | Not supported | "No LLM gateway." [source](https://github.com/zerobootdev/zeroboot) |
| MCP client | Not supported | "Not an MCP client." [source](https://github.com/zerobootdev/zeroboot) |
| MCP-server hosting | Not supported | "No mcp-server hosting capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| MCP server | Not supported | "No MCP server." [source](https://github.com/zerobootdev/zeroboot) |
| Model inference API (first-party) | Not supported | "No model inference api (first-party) capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Preinstalled coding agent | Not supported | "No preinstalled coding agent capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Not supported | "No networking inside forks — cannot serve HTTP from a fork; 'No built-in TLS'." [source](https://github.com/zerobootdev/zeroboot) |
| Custom domains | Not supported | "No networking / no web endpoint." [source](https://github.com/zerobootdev/zeroboot) |
| Direct public IPv6 | Not supported | "No direct public ipv6 capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Edge KV store | Not supported | "No edge kv store capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Egress controls | Not applicable | "Forks have NO networking at all (serial I/O only) — egress policy is inapplicable; network isolation is total by design (deny-all by architecture, not a configurable policy)." [source](https://github.com/zerobootdev/zeroboot) |
| Email send / receive | Not supported | "No email." [source](https://github.com/zerobootdev/zeroboot) |
| Public preview URLs | Not supported | "No networking — cannot expose a URL from a fork." [source](https://github.com/zerobootdev/zeroboot) |
| Private networking | Not supported | "No private networking capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Built-in reverse proxy | Not supported | "No ingress to forks (serial I/O only)." [source](https://github.com/zerobootdev/zeroboot) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "API-key auth for the exec API; no auth-as-a-service for workloads." [source](https://github.com/zerobootdev/zeroboot) |
| BYOC | Not supported | "No managed BYOC; self-host (run the binary on your KVM host) is a separate option." [source](https://github.com/zerobootdev/zeroboot) |
| Deploy into customers' VPCs | Not supported | "No deploy into customers' vpcs capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Secrets management | Not supported | "No secrets vault/injection." [source](https://github.com/zerobootdev/zeroboot) |
| Self-host / OSS core | Supported | "Apache-2.0 Rust core, self-hostable via `cargo build --release` (needs Linux + KVM + Firecracker v1.12+) — the OSS half of the open-core." [source](https://github.com/zerobootdev/zeroboot) |
| Sharing | Not supported | "No networking — nothing to share by link." [source](https://github.com/zerobootdev/zeroboot) |
| SSO / SAML | Not supported | "No SSO/SAML." [source](https://github.com/zerobootdev/zeroboot) |
| Teams | Not supported | "No team/org model (API-key only)." [source](https://github.com/zerobootdev/zeroboot) |
| Workload identity | Not supported | "No workload identity capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Official Rust binary: template, bench, serve, test-exec. Deployment guide uses template and serve; no separate hosted client CLI." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/DEPLOYMENT.md) |
| E2B-compatible API | Not supported | "No e2b-compatible api capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Filesystem API | Not supported | "No filesystem api capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Git deploy | Not supported | "No git deploy (it's an exec primitive)." [source](https://github.com/zerobootdev/zeroboot) |
| HTTP data API | Not supported | "No http data api capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| OpenAPI spec | Not supported | "No OpenAPI spec in the repo (API.md is prose)." [source](https://github.com/zerobootdev/zeroboot) |
| Private container registry | Not supported | "No registry (runtime templates are pre-baked snapshots)." [source](https://github.com/zerobootdev/zeroboot) |
| Public API | Supported | "API.md documents exec, batch, health, and metrics routes. Managed /v1/health returned HTTP 200; /v1/metrics returned HTTP 404. Execution calls were not made." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/API.md) |
| SDK | Supported | "Official Python (zero dependencies) and TypeScript/Node (zero dependencies, fetch) SDKs in repository. Package registry availability was not verified." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/ARCHITECTURE.md) |
| SSH access | Not supported | "No SSH — forks have no networking (serial I/O only)." [source](https://github.com/zerobootdev/zeroboot) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Not supported | "No cloud-init / ignition config capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Desktop / computer-use sandbox | Not supported | "No desktop / computer-use sandbox capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| GPU compute | Not supported | "No GPU." [source](https://github.com/zerobootdev/zeroboot) |
| Live-state (memory) snapshots | Supported | "Firecracker boots a VM with your runtime (Python+numpy+pandas, Node.js, etc.), pre-loads modules, and snapshots the full memory + CPU state. This restores pre-initialised runtime state; arbitrary user-session checkpoints are not documented." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/ARCHITECTURE.md) |
| Multi-region | Not supported | "Managed region selection or deployment in multiple geographic regions is not disclosed. A single API hostname does not establish a single physical region." [source](https://github.com/zerobootdev/zeroboot) |
| Object storage | Not supported | "No object storage capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Persistent disk | Not supported | "Ephemeral only — no persistent storage (fork, run, discard)." [source](https://github.com/zerobootdev/zeroboot) |
| Sandbox templates / custom images | Supported | "Templates boot a Firecracker VM, pre-load your runtime, and snapshot it. This is a one-time cost (~15s). Custom kernel/rootfs/init are operator inputs on self-host; managed health reports Python/Node presets." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/DEPLOYMENT.md) |
| Scale to zero | Not supported | "Forks are ephemeral, but no idle-instance suspension/autoscaling or zero-idle-cost hosted pricing is documented. The self-host API server and templates remain operator-managed." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/DEPLOYMENT.md) |
| Selectable isolation runtime | Not supported | "No selectable isolation runtime capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Snapshots / forking | Supported | "Template snapshot → ~0.8ms CoW fork (mmap MAP_PRIVATE) — the core primitive; 1000 concurrent forks in ~815ms (self-reported)." [source](https://github.com/zerobootdev/zeroboot) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Not supported | "No database branching capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Ephemeral instant DB (no-signup) | Not supported | "No ephemeral instant db (no-signup) capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| First-party database | Not supported | "No database." [source](https://github.com/zerobootdev/zeroboot) |
| Vector search | Not supported | "No vector search capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "No managed ci/cd runners capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Built-in observability | Partially supported | "Source API.md documents Prometheus fork/exec histograms, request counts, and error rates; exec responses include timings. Managed GET /v1/metrics returned HTTP 404, so hosted metrics cannot be confirmed." [source](https://github.com/zerobootdev/zeroboot/blob/main/docs/API.md) |
| Preview environments | Not supported | "No preview environments capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Scheduled tasks | Not supported | "No scheduler." [source](https://github.com/zerobootdev/zeroboot) |
| Project template marketplace | Not supported | "No project template marketplace capability documented in the checked README, API/deployment/architecture docs, SDK READMEs, or repository tree." [source](https://github.com/zerobootdev/zeroboot) |
| Durable workflows | Not supported | "No durable workflows." [source](https://github.com/zerobootdev/zeroboot) |

## Agent readiness

### Read: 5 of 6 signals present

5/6 signals (3 full, 2 partial)

- Llms txt: na — "No own content site: /llms.txt returns HTTP 302 to the repository HTML, not an llms file; no llms.txt in repository tree."
- Llms full txt: na — "No own content site: /llms-full.txt redirects to repository HTML; no modular llms files in repository tree."
- Robots AI policy: na — "Website redirects every checked discovery path to GitHub; product controls no independent robots policy."
- JSON LD: na — "GitHub presentation rather than a vendor site; fetched HTML has no JSON-LD."
- Sitemap: na — "No own content site: sitemap.xml redirects to repository HTML."
- Meta quality: pass — "GitHub HTML contains descriptive title, description, OG title/description/image; retained homepage-signals.json and HTML pointer."
- Markdown negotiation: partial — "Accept: text/markdown on landing returns GitHub HTML, not negotiated markdown. Linked README/docs have fetchable native .md variants on raw.githubusercontent.com."
- Content efficiency: partial — "Fetched landing HTML 302585 bytes; HTMLParser readable text excluding script/style 6096 bytes (2.01%). Native Markdown docs separately available."
- Docs discoverable: pass — "README first-class Docs section links API Reference, Deployment Guide, Architecture."
- Pricing machine readable: fail — "README offers early-access managed API/waitlist but discloses no prices or structured tiers."
- Anti bot: pass — "curl fetched repository landing and all raw docs without a challenge; managed health returned JSON HTTP 200. Conventional website files are redirects, not anti-bot walls."

### Drive: 6 of 11 signals present

6/11 signals (4 full, 2 partial)

- Public API: pass — "API.md documents request/response shapes for exec and parallel batch, plus health/metrics; managed health 200, metrics 404 noted separately."
- Openapi spec: fail — "No OpenAPI/Swagger file or spec link in docs/tree; common API-host /openapi.json and /swagger.json return 404."
- MCP server: fail — "No documented MCP endpoint or installable MCP server; website discovery path redirects to GitHub and API-host /.well-known/mcp returns 404."
- SDK packages: pass — "Two official in-repo SDKs: Python and TypeScript/Node, both with usage docs; package publication not verified."
- Auth docs: pass — "API.md documents Bearer keys, api_keys.json/env loading, missing-file auth disabled, 401 invalid/missing key, and 100 req/s per key."
- Agent self serve creds: fail — "Public shared demo key is documented, but no programmatic issuance of a dedicated managed key; early-access waitlist/manual approval, no signup probe."
- Webhooks: fail — "No webhooks documented in checked API/docs/tree."
- CLI tool: pass — "Official source-built CLI template/test-exec/bench/serve; operator-oriented, not a hosted client CLI."
- Error model: partial — "API.md documents execution stdout/stderr/exit_code and HTTP 401/429, but no documented structured API error object; source ErrorResponse alone is not complete API docs."
- Rate limit docs: partial — "API.md states 100 req/s per key and HTTP 429; no response-header contract documented."
- Agent config: fail — "No AGENTS.md/agents.md, /.well-known/agent, or agent-skills configuration in recursive tree/docs."

## Compliance & regions

- Regions note: Managed endpoint api.zeroboot.dev; no placement/region matrix disclosed. One hostname does not establish one physical region. Self-host placement is operator-controlled.

## Open source

- Repository: https://github.com/zerobootdev/zeroboot
- License: Apache-2.0
- Stars: 2460
- Forks: 110
- Self-host methods: source-build
- Self-host dependencies: firecracker, kvm

## Company & presence

- Team size: 1 recorded GitHub contributor
- GitHub: https://github.com/zerobootdev/zeroboot

## Nearby in the atlas

- [Agent Safehouse](/products/agent-safehouse.md)
- [Agent Sandbox](/products/agent-sandbox.md)
- [Agent Substrate](/products/agent-substrate.md)
- [Agent37](/products/agent37.md)
- [AgentNest](/products/agentnest.md)
- [Anthropic Sandbox Runtime (srt)](/products/sandbox-runtime.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.