cloudflare/sandbox-sdk

Run sandboxed code environments on Cloudflare's edge network

What it solves

Cloudflare Sandbox SDK provides a secure way to execute untrusted code in isolated containers at the edge. It eliminates the need for managing complex infrastructure for applications that require dynamic code execution, such as AI code interpreters, interactive development environments (IDEs), and CI/CD pipelines.

How it works

The SDK allows Cloudflare Workers applications to spawn and manage isolated containers. Developers can use the SDK to execute shell commands, read and write files to a persistent workspace, and expose internal container services to the public internet via zero-config tunnels (*.trycloudflare.com URLs).

Who it’s for

Developers building AI agents with code execution capabilities, data analysis platforms, and tools that require secure, ephemeral or persistent code execution environments on Cloudflare's global network.

Highlights

  • Secure Isolation: Each execution environment runs in its own dedicated container.
  • Edge-Native: Integrated directly with Cloudflare Workers and Durable Objects.
  • Code Interpreter Capabilities: Native support for executing Python and JavaScript with rich output capture.
  • Quick Tunnels: Instantly expose services running inside the sandbox to the web without DNS configuration.
  • File System Access: Full ability to manage files within the sandbox workspace.
  • Git Integration: Ability to clone repositories directly into the environment.

Related

  • Project
    e2b-dev/E2B

    E2B is an open‑source platform that offers cloud‑hosted, isolated sandboxes for safely running AI‑generated code. It ships Python and JavaScript SDKs to start a sandbox, execute shell commands, run code snippets, or control a desktop environment. The runtime can be self‑hosted on AWS, GCP, Azure, or any Linux machine via Terraform, making it a practical building block for LLM‑driven agents, AI coding assistants, and automation bots.

  • Project
    opensandbox-group/OpenSandbox

    OpenSandbox provides isolated, secure environments on your own infrastructure for AI agents to execute code, run commands, and operate browsers or desktops.

  • Project
    e2b-dev/code-interpreter

    An open-source infrastructure for running AI-generated code in secure, isolated cloud sandboxes via JavaScript and Python SDKs.

  • Project
    tastyeffectco/sandboxd

    A self-hosted AI app builder: one HTTP request spawns an isolated container, runs a coding agent against your prompt, and returns a live preview URL — with your own models, data, and infrastructure. The idea: instead of sending your code to a hosted builder like Bolt or v0, you own the whole stack. sandboxd is intentionally small — Go + Docker + Traefik + SQLite, no Kubernetes — and favors operational simplicity: idle containers sleep and wake automatically, so many apps fit on one machine. Two ways to use it: a REST API for embedding into products, or a no-code web console (a pure API client) for interactive building. Beyond AI generation, it can launch 80+ curated open-source apps as one-click containers. Not for everyone: the README says skip it if you just need a couple of containers (a Docker script suffices). It's aimed at scenarios like AI app-builder products, agent platforms, per-user preview environments, or team multi-app hosting. Monetization: MIT-licensed core, optional managed cloud and BYOC services.

  • Dispatch
    Securing AI Agents with Isolated Docker Sandboxes

    An exploration of agent-sandbox, a tool designed to run AI coding agents within isolated Docker containers to prevent unauthorized system access and ensure execution safety.