superradcompany/microsandbox
A tool that locks up untrusted code or AI agents in a tiny isolated virtual machine that boots in under 100 milliseconds
microsandbox is an open-source runtime that runs untrusted code and AI agents inside lightweight virtual machines called microVMs. It can pull standard Docker images directly and ships with SDKs for Rust, Python, TypeScript, Go, and Ruby plus a command-line tool called msb. It's written in Rust, released under the Apache 2.0 license, and built by a company backed by Y Combinator.
What it does
- Runs untrustworthy programs, such as AI-agent-generated code, plugins, CI jobs, or web scrapers, inside hardware-isolated microVMs
- Pulls standard OCI container images from registries like Docker Hub and offers a Docker-like msb CLI (run, exec, pull, and more)
- Works on Apple Silicon Macs, Linux with KVM enabled, and Windows 10+ with WHP enabled, with average boot times under 100 milliseconds on an M1 machine
- Lets developers spawn sandboxes directly from application code with no separate server or long-running daemon, and keeps secrets like API keys from ever entering the VM
- Supports Agent Skills and an MCP server so AI coding tools like Claude Code and Cursor can create their own sandboxes
Why it matters
Giving AI agents real compute and command-execution power requires a containment layer strong enough that mistakes don't spread, and this project delivers virtual-machine-grade isolation while staying as fast and light as a container. Several existing projects, including Vercel's Eve and LlamaIndex, already rely on it, which suggests it has seen some real-world validation.
Terms in this repo
- microVM · an ultra-lightweight virtual machine that starts up far faster than a traditional VM
- OCI-compatible · able to run standard container images in the format used by Docker and similar tools
- KVM/WHP · hardware virtualization features in Linux and Windows that let VMs run fast
- MCP server · a connector that lets AI agents call external tools through a standardized protocol
- SDK · a code library that lets developers use this functionality directly from their own programs
Repository description (English)
🧱 easy fast local-first microVM runtime and library
Open on GitHubTrending repos
- vorssaint/vorssaint-utilsOne free menu bar app replaces a dozen paid Mac utilities
- Alishahryar1/free-claude-codeA local proxy that lets coding AI agents run on 49 free or cheap model providers instead of one paid service
- freestylefly/awesome-gpt-image-2A library of 532 reverse-engineered prompts that turn GPT-Image2 into a predictable image-making tool
- block/buzzAn open-source workspace where humans and AI agents chat, code, and review in the same rooms
- NousResearch/hermes-agentNous Research's Hermes is an AI agent that gets smarter the more you use it
- virgiliojr94/book-to-skillA tool that turns technical book PDFs into on-demand reference skills for AI coding agents
- VoltAgent/awesome-agent-skillsA single hub collecting over 1000 'how-to' manuals that make AI coding assistants act like experts
- anthropics/claude-plugins-communityA shared shelf where anyone's Claude add-ons get listed for install