Infrastructure / Deployment

Agent Infra Sandbox

Agent Infra Sandbox, shipped as AIO Sandbox, bundles a VNC browser, shell, file service, Jupyter, VSCode Server and preconfigured MCP servers into a single Docker container, so an agent reaches all of them over one shared filesystem instead of coordinating separate services. Python, TypeScript and Go SDKs drive it through an HTTP API, and it deploys with Docker Compose or a plain Kubernetes manifest. The agent-infra organization maintains it.

The image is published on GitHub Container Registry, with a separate mirror on a Volcengine registry for users in mainland China. Verified 2026-08-13 via the agent-infra/sandbox README and the GitHub repository metadata.

Openness

5 high confidence

5.0

license: Apache-2.0(OSI)
source: public(GitHub)
packaging: self-hostable Docker image + K8s deploy examples
core-gated: ungated

Apache-2.0, fully self-hostable single-container runtime; no separate proprietary/managed tier gating the core.

https://github.com/agent-infra/sandbox recorded 2026-06-04
Apache-2.0 license, single-Docker-container all-in-one agent sandbox, self-hostable
https://api.github.com/repos/agent-infra/sandbox recorded 2026-08-13
Repository metadata - public (private false), not archived, license spdx_id Apache-2.0, described as an all-in-one sandbox combining Browser, Shell, File, MCP and VSCode Server in a single Docker container.
https://raw.githubusercontent.com/agent-infra/sandbox/main/LICENSE recorded 2026-08-13
The verbatim Apache License 2.0 body, with no added terms or field-of-use restrictions.
https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-08-13
Single ``docker run ghcr.io/agent-infra/sandbox`` quick start plus Docker Compose and Kubernetes Deployment manifests; Python, TypeScript and Go SDKs; closes with "AIO Sandbox is released under the Apache License 2.0". No paid tier, hosted plan or license key is mentioned anywhere in the document.

Adoption

1 low confidence

1.0

4,670 npm downloads in the trailing 30 days for @agent-infra/sandbox, far below the thresholds for any higher band, so level 1.

https://api.npmjs.org/downloads/point/last-month/@agent-infra/sandbox recorded 2026-08-12
4,670 downloads in the last month

Capability

3 medium confidence

3.0

Unusually broad multi-modal feature set (browser+shell+file+MCP+IDE in one) but isolation is container-level only, below the Firecracker/gVisor isolation strength of the frontier deployment runtimes; scored 3. The quick start relaxes isolation further still, running with seccomp unconfined.

https://github.com/agent-infra/sandbox recorded 2026-06-04
feature list: Browser/VNC, Shell, File, MCP, Jupyter, VSCode in one Docker container
https://raw.githubusercontent.com/agent-infra/sandbox/main/README.md recorded 2026-08-13
Browser/VNC, Terminal, File, VSCode Server, Jupyter and MCP services in one container behind a shared filesystem; Docker Compose and Kubernetes Deployment examples; no concurrency limit or isolation primitive beyond the container is published.

Verified 2026-08-12