# AIO Sandbox (agent-infra)

> All-in-one agent sandbox in a single Docker container: browser (VNC/CDP), shell, file system, VS Code Server, Jupyter and MCP sharing one file system.

- id: `aio-sandbox`
- category: Infrastructure (`infrastructure`)
- url: https://sandbox.agent-infra.com/
- repo: https://github.com/agent-infra/sandbox
- docs: https://sandbox.agent-infra.com/api
- status: active
- pricing: open-source
- license: Apache-2.0
- tags: sandbox, docker, browser, computer-use, mcp, self-hosted
- llms.txt: https://sandbox.agent-infra.com/llms.txt
- auth: api-key
- access notes: Self-hosted. MCP at http://localhost:8080/mcp; enable SANDBOX_API_KEY before exposing it.
- related: E2B Desktop Sandbox (https://indexagentica.com/entries/e2b-desktop/); Cua (https://indexagentica.com/entries/cua/); OpenSandbox (https://indexagentica.com/entries/opensandbox/); Docker Sandboxes (https://indexagentica.com/entries/docker-sandboxes/); Browser Use (https://indexagentica.com/entries/browser-use/)
- sources: https://github.com/agent-infra/sandbox , https://sandbox.agent-infra.com/
- added: 2026-10-20
- updated: 2026-10-20
- last verified: 2026-10-20
- featured in: Self-hosted sandboxes for agents compared (https://indexagentica.com/compare/self-hosted-agent-sandboxes/)
- maintainer: agent-infra
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/aio-sandbox/
- json: https://indexagentica.com/api/entries/aio-sandbox.json

Run `ghcr.io/agent-infra/sandbox` and the container serves API docs, a VNC browser, VS Code Server and MCP services at `/mcp` on port 8080, so a file downloaded in the browser is immediately available to the shell and code tools. Set `SANDBOX_API_KEY` to require a key on every service (sent as `X-AIO-API-Key`, a bearer token or `?api_key=`); without it the services stay open, so the README binds to 127.0.0.1 and says to keep port 8080 private behind a reverse proxy in the cloud. Pin release tags for reproducible deployments.