Alternatives
Products that do what Sanbox, batteries included sandboxes for AI agents does
Hi HN, We are building Sanbox, a platform for running AI agents in isolated and resumable sandboxes. We use the OpenCode SDK as the harness, support reusable templates, and have a CLI that works with Codex, Claude Code, Cursor, CI, or your terminal. Each sandbox has MicroVM isolation, a persistent filesystem, and live trail of run events. Can also self-host if required for security/compliance. It's on the roadmap to add network ACL, secrets managements, LLM cost tracking & observability. We are also happy to build custom integrations or triggers for specific use cases. For example,…
- 1

- 2
- 3

- 4

- 5
- 6

The power of Codex with local, self-hosted models and voice
Jul 2026 · opencodesuper.app
- 7

- 8

- 9AS
Hi HN, AgentBox is an SDK for running coding agents (Claude Code, Codex, OpenCode) inside sandboxes (Docker, E2B, Modal, Daytona, Vercel). One API. Swap the agent or the sandbox and your code doesn't change. Think of it as what the AI SDK did for LLMs, but for agent + runtime. Most wrappers call agents in non interactive mode (claude --print, codex exec). AgentBox instead boots each agent's native server inside the sandbox (Codex app-server over JSON-RPC, OpenCode serve over HTTP/SSE, Claude Code's SDK WebSocket transport) and drives it from the host, behaving like an interactive…
Apr 2026 · github.com
- 10

Local sandboxes for AI agents on your Mac, Linux, bare metal
Aug 2026 · github.com
- 11

- 12

- 13RA
Hey HN, I built SuperHQ, an app that lets you run coding agents in local sandboxes (powered by Shuru). No custom UI wrapping the agents, they run as CLI/TUI like they were designed to. It just provides you the tools most of us (okay, maybe just me?) needed for running multiple coding agents in parallel without worrying about breaking your system or work environment. Each agent runs in its own microVM. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a unified diff view to accept or discard changes. API keys never enter the sandbox, they…
Apr 2026 · superhq.ai
- 14MO
Hey everyone, We're excited to introduce MarinaBox, an open-source toolkit for creating isolated desktop/browser sandboxes tailored for AI agents. Over the past few months, we've worked on various projects involving: 1. AI agents interacting with computers (think Claude computer-use scenarios). 2. Browser automation for AI agents using tools like Playwright and Selenium. 3. Applications that need a live-session view to monitor AI agents' actions, with the ability for human-in-the-loop intervention. What we learned: All these scenarios share a common need for robust infrastructure. So,…
2024 · github.com
- 15

- 16

- 17

- 18

- 19
- 20

13,000+ MCP servers, skills & plugins for AI coding agents
Jul 2026 · codexmarketplaces.com
- 21

- 22SA
Hi HN, This is a project I've been working on since the beginning of 2025 full time, without funding. Coding agents have fundamentally changed the way we write software. When you let an agent write code, pull dependencies, and run scripts, you are delegating trust while still keeping the responsibility. You shouldn't have to choose between moving fast with agents and maintaining basic control over your host machine. Normally, we just inspect the final result, treating the app like a black box. Most security tools only sandbox the app runtime and ignore the build phase. CapaKit is my attempt…
Jun 2026 · capakit.com
- 23

- 24BM
Wrapper around Apple's macOS sandbox-exec tool, which usually sandboxes native apps. It is "allow-first" i.e. it will not overprotect everything, just crucial information and therefore allows most tools to run without issues. Limiting is done using a .gitignore like file schema. Further TOML config options available. I built it because Docker sandboxing requires config and planning. Build in sandboxing of AI tools instead is limited to the very tools themselves, instead I wanted to have a simple cage around Claude running inside VSCode. Also needed to protect files inside a folder like…
Apr 2026 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →