AI Potluck
Infrastructure / Deployment

Replit Agent / Code Execution API

Replit

Closed-source cloud dev platform with Nix-based environments supporting 30,000+ OS packages, exposing a Code Execution API that runs untrusted/AI-generated code in sandboxed VMs. Picked when teams want a tightly integrated build+run+deploy story (Replit Agent 4 leans heavily on this) rather than an unbundled SDK. Raised $400M Series D in March 2026 at a $9B valuation; 50M+ users.

Replit Code Execution API for AI agents (replit.com/blog/ai-agents-code-execution), a stateless sandboxed API for running untrusted (primarily Python) code, isolated via omegajail (Replit's unprivileged container sandbox) on Autoscale Deployments, ~100ms start. Confirmed live June 2026; `replit-code-exec` PyPI client exists. Proprietary service. NOTE: 'Replit Agent' is an autonomous coding agent (orchestration), but the deployment-relevant artifact here is the code-execution sandbox, scored as deployment per the recipe litmus.

Openness

1 medium confidence
1.0
license
Proprietary
source
closed
service
proprietary(Replit managed Autoscale Deployments, no self-host)
open-part
third-party isolation primitive omegajail(github.com/omegaup/omegajail) + an ARCHIVED thin client (replit-code-exec, ISC, read-only since 2025-02-11)

Closed managed service. The sandbox primitive (omegajail) is open source but it is a third-party dependency, not Replit's own open core, and the thin client is archived; there is no self-hostable open product, so an open dependency under a closed service is not open_core. Reclassified from open_core (borderline).

  • https://replit.com/blog/ai-agents-code-execution recorded 2026-06-04

    Code Execution API uses omegajail (open source unprivileged container sandbox) on Replit's proprietary Autoscale Deployments; replit-code-exec PyPI client; Python-focused

  • https://github.com/replit/replit-code-exec recorded 2026-06-04

    Replit code-exec client: stateless API for AI agents, runs untrusted Python in ephemeral unprivileged containers using omegajail (github.com/omegaup/omegajail); ISC license; repo ARCHIVED read-only 2025-02-11

  • https://blog.replit.com/ai-agents-code-execution recorded 2026-06-04

    canonical Replit blog: Code Execution API uses omegajail on Autoscale Deployments, ~100ms, Python-focused (Feb 2024)

Adoption

4 medium confidence
4.0

Replit platform serves >50M users (Replit docs/coverage) and runs >1M live projects on Cloud Run (Google Next '26, primary). The code-execution API specifically discloses no standalone usage figures, so adoption is attributed to the Replit Agent/platform surface it powers, not the raw API. Placed at 4 (platform-surface reach); the API alone would be lower.

Capability

3 medium confidence
3.0

Fast container-level execution tuned for agent code-eval, but container (not microVM) isolation, narrow language focus, and no persistence put it mid-tier vs microVM-backed peers. Note: the public self-serve client (replit-code-exec) is archived (2025-02-11); the capability now lives inside the Replit Agent surface.

Unchanged since 2026-07-30 (last edited, not re-checked)