e2b-sandbox
Use as the default runtime when an agent must execute untrusted code or commands — Firecracker microVMs with ~150ms cold start give each run an isolated, disposable computer.
- Score
- 99.8864 signals
- Evidence
- 13,635 stars · 1,015 forks · 10 mentions · passed install test
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · Sandbox
- babelcloud-gru-sandbox180 stars · 50 forks94.494
What it is
A managed sandbox built on Firecracker microVMs with very fast (~150ms) cold starts. It gives an agent an isolated, disposable Linux environment to run code, install packages, and execute shell commands without risk to the host. It is the default product-runtime for agent code execution.
When to use it
Whenever an agent generates and runs code, or executes commands you don't fully trust, and you need strong isolation with low latency. The trigger is "the agent needs its own computer to run this."
How to install / invoke
Use the E2B CLI plus its SDK to spawn and drive sandboxes from agent code. Keep it as the default; reach for a self-hosted OSS sandbox only when economics or data residency demand it.
Notes
Never mask errors inside sandbox commands (no ; exit 0, no swallowing stderr) — silent failures in a sandbox are
expensive to debug. For high-volume self-hosting, an OSS sandbox can be cheaper past a break-even point.
Related
microsandbox
Use as the OSS self-hosted sandbox when you need to run agent code on your own infra — libkrun-based microVM isolation with no per-sandbox vendor cost, the escape hatch from a managed runtime at high volume.
claude-managed-agents-selfhost
Use for enterprise hosted-control agents — the agent loop runs at the provider while execution happens on your own infrastructure — when you want a managed control plane but data and code must stay on your machines.
browserbase-bb
Use when an agent must operate the live web — navigate, act, and extract on real pages — via a cloud browser driven by act/extract/observe primitives, with a local-Chromium escape hatch using the same code.