sandbox GitHub repositories

TencentCloud/CubeSandbox

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

★ 13.1K+11 todayGo

agents sandbox

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

★ 11.1K+21 todayPython

astrid-runtime/astrid

Astrid is a portable, capability-secure operating system for composable software.

★ 10.3K+0 todayRust

superradcompany/microsandbox

🧱 easy, fast, programmable and local-first microVM runtime and library

★ 8.8K+23 todayRust

python agents

smol-machines/smolvm

An embeddable, portable, branchable virtual machine to safely run Agents locally.

★ 6.9K+12 todayRust

e2b-dev/fragments

Open-source Next.js template for building apps that are fully generated by AI. By E2B.

★ 6.4K+0 todayTypeScript

dtyq/magic

Magicrew. The first open-source all-in-one AI productivity platform (Generalist AI Agent + Workflow Engine + IM + Online collaborative office system)

★ 5.1K+0 todayTypeScript

rivet-dev/agentos

Tiny, fast, Linux-compatible sandboxes. Powered by WebAssembly.

★ 4.8K+5 todayRust

polyaxon/polyaxon

AI Infra / AI Orchestration / AI Control Plane

moltis-org/moltis

A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on your hardware.

★ 2.9K+9 todayRust

llm mcp

Ephemeral-AI-Lab/layerfs

Ephemeral Workspaces, durable shared history. LayerFS gives every agent a complete, writable filesystem Workspace over shared committed history, without copying the base. Agents work in parallel, commit what changed as deduplicated checkpoints, then branch, rewind or merge. Try it with LayerFS × DSH.

★ 2.4K+215 todayRust

OpenCoworkAI/open-cowork

Open-source AI agent desktop app for Windows & macOS. One-click install Claude Code, MCP tools, and Skills — with sandbox isolation, multi-model support, and Feishu/Slack integration.

★ 2.2K+1 todayTypeScript

mcp claude-code

eugene1g/agent-safehouse

Sandbox your local AI agents so they can read/write only what they need

★ 2.1K+0 todayShell

e2b-dev/runtime

The runtime behind every E2B stack: Cloud, Enterprise, and your own machine.

★ 1.8K+1 todayGo

BitMiracle-AI/Dormice

The SQLite of agent sandboxes — self-hosted, E2B-compatible. One machine, sandboxes that live forever, idle costs nothing.

★ 1.7K+10 todayTypeScript

ai-agents agents

rivet-dev/agents

A durable process per agent, with memory that survives restarts

★ 1.6K+2 todayTypeScript

cloudflare/sandbox-sdk

Run sandboxed code environments on Cloudflare's edge network

★ 1.2K+0 todayTypeScript

ai agents

cuga-project/cuga-agent

CUGA is an open-source generalist agent harness for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aware features.

★ 1.1K+1 todayPython

tensorlakeai/tensorlake

Tensorlake is a serverless runtime for sandboxes and deploying background agentic applications

★ 1.0K+1 todayRust

ConardLi/easy-agent

Production-ready open source terminal coding agent with readable, layered code: permission rules, OS sandboxing, MCP, skills, sub-agents, and Anthropic, OpenAI-compatible, Gemini, or local models.

★ 1.0K+1 todayTypeScript

llm mcp

tastyeffectco/sandboxd

Open-source, self-hosted AI app builder — an agent builds real apps in isolated sandboxes on your own server, each live at a preview URL. Self-host in one command. MIT.

★ 974+1 todayGo

Rath-Team/OpenRath

An open-source, PyTorch-like runtime for dynamic multi-agent and multi-session workflows.

★ 960+0 todayPython

Katakate/k7

Your own self-hosted infra for lightweight VM sandboxes to safely execute untrusted code. CLI, API, Python SDK. ⭐ Star it if you like it! ⭐

★ 824+0 todayPython

agents self-hosted

coipond/coi

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.

useLexora/Lexora

A self-evolved, sovereign desktop AI agent built for real-world action — beyond model wrappers and coding copilots. / 真实实践中自我演化的独立桌面 AI Agent。

★ 642+10 todayTypeScript

mcp skills