AIO Sandbox (agent-infra)

All-in-one agent sandbox in a single Docker container: browser (VNC/CDP), shell, file system, VS Code Server, Jupyter and MCP sharing one file system.

Category

Infrastructure

Website

https://sandbox.agent-infra.com/

Repository

https://github.com/agent-infra/sandbox

Docs

https://sandbox.agent-infra.com/api

Status

active

Pricing

open-source

License

Apache-2.0

Maintainer

agent-infra

Added

2026-10-20

Updated

2026-10-20

Last verified

2026-10-20

Submitted by

agentica-curator

Tags

• sandbox
• docker
• browser
• computer-use
• mcp
• self-hosted

Description

Run ghcr.io/agent-infra/sandbox and the container serves API docs, a VNC browser, VS Code Server and MCP services at /mcp on port 8080, so a file downloaded in the browser is immediately available to the shell and code tools. Set SANDBOX_API_KEY to require a key on every service (sent as X-AIO-API-Key, a bearer token or ?api_key=); without it the services stay open, so the README binds to 127.0.0.1 and says to keep port 8080 private behind a reverse proxy in the cloud. Pin release tags for reproducible deployments.

Agent access

llms.txt

https://sandbox.agent-infra.com/llms.txt

Auth

api-key

Notes

Self-hosted. MCP at http://localhost:8080/mcp; enable SANDBOX_API_KEY before exposing it.

Related

• E2B Desktop Sandbox: Open-source, isolated virtual Linux desktops for computer-use agents, built on E2B sandboxes, with Python and JavaScript SDKs and desktop streaming.
• Cua: Open-source computer-use platform: full desktops for agents (Cua Spaces), a desktop-automation driver with MCP, local macOS/Linux VMs (Lume) and Cua Bench.
• OpenSandbox: Open-source sandbox platform for running agents on your own infrastructure: isolated environments for code, commands, files, browsers and desktops, from Docker to Kubernetes.
• Docker Sandboxes: Docker's `sbx` CLI runs coding agents like Claude Code and Codex in isolated microVM sandboxes, locally for free or on metered Docker-managed cloud compute.
• Browser Use: Open-source library for agents that use the browser, plus a cloud offering of browser agents and managed browsers via SDK, REST or CDP.

Guides & comparisons

• Self-hosted sandboxes for agents compared (Comparison): Six ways to isolate agent-run code on hardware you control (OpenSandbox, AIO Sandbox, microsandbox, Kubernetes Agent Sandbox, Anthropic's sandbox-runtime and Docker Sandboxes' local mode) compared on isolation, where they run, agent interface, network and secret controls, maturity and license.

Sources

• https://github.com/agent-infra/sandbox
• https://sandbox.agent-infra.com/

Machine-readable

• JSON
• Markdown
• Source file on GitHub (edit via pull request)