Introduction

npx microsandbox run debian

curl -fsSL https://install.microsandbox.dev | sh
msb run debian

irm https://install.microsandbox.dev/windows | iex
msb run debian

​

Why microsandbox

• Hardware isolation. Each sandbox is a VM, not a container namespace on the host kernel.
• Local runtime. The SDK starts the sandbox process directly. No daemon, remote service, or infrastructure setup.
• Cloud when you want it. The same SDK and CLI run sandboxes on hosted infrastructure; an API key is the only change.
• Fast startup. Sandboxes are lightweight enough to create from application code.
• Docker-like inputs. Use familiar OCI images from Docker Hub, GHCR, ECR, GCR, or another registry.
• Programmable controls. Configure resources, volumes, secrets, networking, and lifecycle from the CLI or SDK.
• Multi-language SDKs. Rust, TypeScript, Python, and Go expose the same core model.

​

Example use cases

• AI agents. Give coding agents and tool-using assistants a dedicated machine for commands, files, package installs, and generated code.
• User code execution. Run submitted scripts, notebooks, plugins, and extensions away from the host.
• CI/CD and builds. Isolate test jobs, compilers, package managers, and build tools.
• Dev environments. Create disposable Linux machines without touching your laptop or host Docker daemon.
• Scrapers and automation. Allow internet access while blocking private networks and metadata services.
• Secure tool execution. Run CLIs and dependencies that should not see host secrets or ambient credentials.

​

Minimal example

use microsandbox::Sandbox;

let sb = Sandbox::builder("hello")
    .image("python")
    .create()
    .await?;

let output = sb.exec("python", ["-c", "print('Hello from a microVM!')"]).await?;
println!("{}", output.stdout()?);

sb.stop().await?;

import { Sandbox } from "microsandbox";

await using sb = await Sandbox.builder("hello")
    .image("python")
    .create();

const output = await sb.exec("python", ["-c", "print('Hello from a microVM!')"]);
console.log(output.stdout());

from microsandbox import Sandbox

sb = await Sandbox.create("hello", image="python")

output = await sb.exec("python", ["-c", "print('Hello from a microVM!')"])
print(output.stdout_text)

await sb.stop()

sb, err := m.CreateSandbox(ctx, "hello", m.WithImage("python"))
if err != nil {
    return err
}
defer sb.Stop(ctx)

out, err := sb.Exec(ctx, "python", []string{"-c", "print('Hello from a microVM!')"})
if err != nil {
    return err
}
fmt.Println(out.Stdout())

​

Next steps