Opening
—
—
Modern apps increasingly need to execute code they didn’t author. From AI agents, customer scripts, or dynamic systems. Use cases
Every sandbox is the same isolated Firecracker microVM with its own filesystem and network. What you run inside it is up to you. The agent’s code Write the agent’s output to the sandbox filesystem and execute it there. Y
Control egress traffic with fine-grained network policies that can be updated at runtime. Credentials brokering injects secrets into outbound requests without exposing them inside the sandbox. Requests Proxying routes se
Pick a region per sandbox or set a project default for maximum performance and compliance. Vercel Sandbox runs your workload there: near your users, your data, or the rest of your stack. Pro and Enterprise teams can add
Capture the complete state of a running sandbox (filesystem and installed packages), then restore it instantly. Share environments with teammates, checkpoint long-running tasks, or skip dependency installation entirely b
Vercel Sandbox runs on Fluid compute, Vercel’s optimized execution model that scales CPU and memory dynamically across millions of executions. With Active CPU pricing, you’re billed for CPU only when code is actively run
You can get started with Vercel Sandbox quickly and easily. See more examples Launch a secure, interactive sandbox environment in milliseconds. Quickly give Vercel Sandbox a try with your AI tool of choice. Bootstrap a s
What is Vercel Sandbox? Vercel Sandbox is an on-demand, isolated Linux microVM that runs arbitrary code safely through an SDK or CLI. Why use Sandbox instead of managing containers or VMs myself? Sandbox gives you secure
