Agent Infra Sandbox
Agent InfraAgent Infra Sandbox, shipped as AIO Sandbox, bundles a VNC browser, shell, file service, Jupyter, VSCode Server and preconfigured MCP servers into a single Docker container, so an agent reaches all of them over one shared filesystem instead of coordinating separate services. Python, TypeScript and Go SDKs drive it through an HTTP API, and it deploys with Docker Compose or a plain Kubernetes manifest. The agent-infra organization maintains it.
The image is published on GitHub Container Registry, with a separate mirror on a Volcengine registry for users in mainland China.
Openness
5 high confidence- license
- Apache-2.0(OSI)
- source
- public(GitHub)
- packaging
- self-hostable Docker image + K8s deploy examples
- core features withheld
- no
Agent Infra Sandbox is Apache-2.0 and self-hostable in full as a single container, with no proprietary or managed tier sold beside it.
- https://api.github.com/repos/agent-infra/sandbox recorded 2026-08-13
Repository metadata - public (private false), not archived, license spdx_id Apache-2.0, described as an all-in-one sandbox combining Browser, Shell, File, MCP and VSCode Server in a single Docker container.
- https://github.com/agent-infra/sandbox recorded 2026-06-04
Apache-2.0 license, single-Docker-container all-in-one agent sandbox, self-hostable
- https://raw.githubusercontent.com/agent-infra/sandbox/main/LICENSE recorded 2026-09-29
The LICENSE file is the standard "Apache License" text, headed "Version 2.0, January 2004", with no added field-of-use terms.
- https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-09-29
Closing section of the README states "AIO Sandbox is released under the [Apache License 2.0](LICENSE)." Searched the body for license key, commercial, pricing, paid and hosted plan: none; the only "enterprise" hit is a container registry hostname, and the optional SANDBOX_API_KEY is a self-set access secret ("Without SANDBOX_API_KEY, services remain open"), not a vendor license.
Adoption
1 low confidenceAdoption is measured by npm downloads of @agent-infra/sandbox, its only published distribution channel. No other usage signal exists for the project.
- https://api.npmjs.org/downloads/point/last-month/@agent-infra/sandbox recorded 2026-08-12
4,670 downloads in the last month
Capability
3 medium confidenceAgent Infra Sandbox bundles a browser, shell, file service, Jupyter, an IDE and MCP servers in one container, a broader feature set than most sandboxes offer. Its isolation is only that of a Docker container, weaker than Firecracker's microVMs or gVisor, and the quick start relaxes it further by running with seccomp unconfined.
- https://github.com/agent-infra/sandbox recorded 2026-06-04
feature list: Browser/VNC, Shell, File, MCP, Jupyter, VSCode in one Docker container
- https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-09-29
README overview says the sandbox "combines Browser, Shell, File, MCP operations, and VSCode Server in a single Docker container" and that "All components run in the same container with a shared filesystem", with Jupyter and VNC listed among the interfaces.
- https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-09-29
README quick start and Compose example run the container with "--security-opt seccomp=unconfined", and the Kubernetes example is a Deployment with "replicas: 2" and per-pod memory and CPU limits; Searched the body for gVisor, Firecracker, microVM and concurrency limit: none.
- https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-09-29
README Compose example mounts a named volume with "sandbox_data:/home/gem/workspace" for the workspace, and installs are offered for Python, TypeScript and Go SDKs including "go get github.com/agent-infra/sandbox-sdk-go".
Verified 2026-09-26