superradcompany/microsandbox
🧱 easy fast local-first microVM runtime and library
What it solves
Microsandbox provides a secure way to run untrusted workloads—such as AI agents, user-submitted code, plugins, and automation scripts—without risking the host system. It replaces slow, heavy virtual machines with lightweight microVMs that offer hardware-level isolation and near-instant startup times.
How it works
It uses microVM technology to create isolated environments that are OCI-compatible, meaning they can run standard container images from registries like Docker Hub. The system is designed to be embeddable, allowing developers to spawn VMs as child processes directly within their code via SDKs for Rust, Python, TypeScript, and Go, or manage them via a CLI tool (msb).
Who it’s for
Developers building AI agents that need to execute code safely, platform engineers managing untrusted plugins or CI jobs, and anyone needing fast, local, hardware-isolated sandboxes for automation or development environments.
Highlights
- Hardware Isolation: Uses microVMs for stronger security than standard containers.
- Instant Startup: Average boot times under 100 milliseconds.
- OCI Compatible: Supports standard container images from Docker Hub and GHCR.
- Embeddable: Can be integrated directly into applications without requiring a long-running daemon or setup server.
- Agent-Ready: Includes an MCP server and specific skills to allow AI agents to manage their own sandboxes.