superradcompany/microsandbox
A tool that locks up untrusted code or AI agents in a tiny isolated virtual machine that boots in under 100 milliseconds
microsandbox is an open-source runtime that runs untrusted code and AI agents inside lightweight virtual machines called microVMs. It can pull standard Docker images directly and ships with SDKs for Rust, Python, TypeScript, Go, and Ruby plus a command-line tool called msb. It's written in Rust, released under the Apache 2.0 license, and built by a company backed by Y Combinator.
What it does
- Runs untrustworthy programs, such as AI-agent-generated code, plugins, CI jobs, or web scrapers, inside hardware-isolated microVMs
- Pulls standard OCI container images from registries like Docker Hub and offers a Docker-like msb CLI (run, exec, pull, and more)
- Works on Apple Silicon Macs, Linux with KVM enabled, and Windows 10+ with WHP enabled, with average boot times under 100 milliseconds on an M1 machine
- Lets developers spawn sandboxes directly from application code with no separate server or long-running daemon, and keeps secrets like API keys from ever entering the VM
- Supports Agent Skills and an MCP server so AI coding tools like Claude Code and Cursor can create their own sandboxes
Why it matters
Giving AI agents real compute and command-execution power requires a containment layer strong enough that mistakes don't spread, and this project delivers virtual-machine-grade isolation while staying as fast and light as a container. Several existing projects, including Vercel's Eve and LlamaIndex, already rely on it, which suggests it has seen some real-world validation.
Terms in this repo
- microVM · an ultra-lightweight virtual machine that starts up far faster than a traditional VM
- OCI-compatible · able to run standard container images in the format used by Docker and similar tools
- KVM/WHP · hardware virtualization features in Linux and Windows that let VMs run fast
- MCP server · a connector that lets AI agents call external tools through a standardized protocol
- SDK · a code library that lets developers use this functionality directly from their own programs
Repository description (English)
🧱 easy fast local-first microVM runtime and library
Open on GitHubTrending repos
- cathrynlavery/diagram-designA skill that makes AI coding tools draw magazine-quality diagrams instead of generic rounded boxes
- public-apis/public-apisA giant crowd-curated directory of free APIs for developers
- semantica-agi/semanticaAn open-source graph infrastructure that lets AI agents show their work, not just their answers
- cactus-compute/needleA 14MB AI model small enough to run tool-calling on a phone or watch, without internet
- unslothai/unslothA desktop app that lets you run and train AI models on your own computer, no coding required
- macro-inc/macroAn all-in-one workspace where email, chat, docs, tasks, and CRM are cross-linked and share one AI memory
- harry0703/MoneyPrinterTurboAn open-source tool that turns a single topic or keyword into a finished short video, complete with script, footage, subtitles, and music
- basecamp/omarchyA ready-made, opinionated Linux setup built by DHH
Latest from METAL LAB
- NVIDIA's 300 Verified Skills Lift Correctness by 41 Points
- Wave your hand at a webcam, hear a theremin: browser instrument released
- Meta AI launches desktop app for Mac, can read an entire app window
- Factory Commits $100M to Partner Network, Pushes to Scale Software Factories
- SpaceX approached Cognition for acquisition four days after closing Cursor deal