awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
opensandbox-group avatar

opensandbox-group/OpenSandbox

0
View on GitHub↗

OpenSandbox

OpenSandbox is a secure execution environment and runtime designed for running untrusted code and scripts generated by AI agents. It utilizes a containerized code execution engine and microVM-based isolation to protect host systems from malicious actions while providing isolated virtual environments.

The project features a sandbox server based on the Model Context Protocol to automate the creation and control of virtual workspaces. It supports the deployment of secure remote desktop hosts, including headless web browsers and editor instances, for automated interaction.

The system includes an isolated workload network gateway for managing egress routing and a vault mechanism for secure credential injection into outbound requests. Additional capabilities cover filesystem operations and a dedicated command-line interface for environment management and diagnostics.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
open-sandbox.ai
↗

Features

  • Code Execution Environments - Provides secure, isolated runtimes specifically for executing untrusted code and scripts generated by AI agents.
  • Code Execution Sandboxes - Provides secure, isolated environments using container runtimes and microVMs to execute arbitrary AI-generated scripts safely.
  • Agent Client Protocols - Uses the Model Context Protocol to expose sandbox control functions to external AI agents and clients.
  • AI Execution Sandboxes - Provides a secure execution environment specifically designed for running untrusted code and scripts generated by AI agents.
  • MCP Servers - Implements a Model Context Protocol server that exposes sandbox controls to AI clients for automation.
  • Model Context Protocol Implementations - Connects AI clients to sandbox environments using the Model Context Protocol standard to automate workspace control.
  • MCP Connectivity - Implements the Model Context Protocol to allow AI agents to automate environment creation and command execution.
  • Containerized Runtimes - Implements a system for deploying isolated workloads using container runtimes or microVMs to protect the host system.
  • Sandbox Lifecycle Management - Provides a unified interface to manage the entire lifecycle of a sandbox from initial creation to final teardown.
  • Virtualization Environments - Deploys and manages secure containers or microVMs to host remote desktops, web browsers, and editor instances.
  • Network Traffic Controllers - Manages outbound network traffic through an isolated gateway to restrict or permit communication with external services.
  • Egress Controllers - Manages outbound traffic through a routing layer that restricts or permits communication with external network addresses.
  • Workload Network Gateways - Ships a traffic control mechanism for managing egress routing and injecting secure credentials into outbound requests.
  • MicroVM Runtimes - Executes untrusted code inside lightweight microVMs to ensure strong security boundaries between the host and workloads.
  • Runtime Credential Injection - Inserts sensitive secrets into outgoing requests via a secure proxy to keep credentials hidden from the workload.
  • Secrets and Credential Management - Injects secrets and manages outbound request authentication to protect credentials from exposure to workloads.
  • Sandbox Management CLIs - Includes a dedicated terminal command-line interface to create environments, execute commands, and inspect diagnostics.
  • Container Lifecycle Managers - Utilizes background services to handle the creation, execution, and monitoring of containerized ephemeral environments.
  • Filesystem Operations - Enables reading, writing, and moving files within an isolated environment using persistent and shared storage patterns.
  • Remote Desktop Environments - Deploys full desktop or browser instances accessible via remote protocols for interactive automation and inspection.
11,627 stars·967 forks·Python·Apache-2.0·34 views

Star history

Star history chart for opensandbox-group/opensandboxStar history chart for opensandbox-group/opensandbox

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does opensandbox-group/opensandbox do?

OpenSandbox is a secure execution environment and runtime designed for running untrusted code and scripts generated by AI agents. It utilizes a containerized code execution engine and microVM-based isolation to protect host systems from malicious actions while providing isolated virtual environments.

What are the main features of opensandbox-group/opensandbox?

The main features of opensandbox-group/opensandbox are: Code Execution Environments, Code Execution Sandboxes, Agent Client Protocols, AI Execution Sandboxes, MCP Servers, Model Context Protocol Implementations, MCP Connectivity, Containerized Runtimes.

Which projects share features with opensandbox-group/opensandbox?

Projects with overlapping indexed features include: alibaba/opensandbox — OpenSandbox is a secure sandbox runtime and containerized code execution engine designed to run AI-generated code and… opensquilla/opensquilla — OpenSquilla is an LLM agent orchestration framework designed to coordinate multi-step AI workflows and tool execution… tencentcloud/cubesandbox — CubeSandbox is a Kubernetes-based platform for executing AI agents in secure, lightweight environments. It provides a… daytonaio/daytona — Daytona is a cloud-native development environment platform designed to orchestrate ephemeral, containerized… e2b-dev/code-interpreter — This project is an infrastructure platform designed to provide secure, isolated, and ephemeral cloud-based Linux… cloudflare/moltworker — Moltworker is an AI agent sandbox and model orchestrator designed for the secure execution of untrusted code and shell…

Projects sharing features with OpenSandbox

These projects share indexed features with OpenSandbox. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • alibaba/opensandboxalibaba avatar

    alibaba/OpenSandbox

    11,682View on GitHub↗

    OpenSandbox is a secure sandbox runtime and containerized code execution engine designed to run AI-generated code and scripts in isolated environments. It serves as a workload orchestrator that prevents host system contamination by utilizing kernel-level isolation to execute arbitrary commands and scripts. The project distinguishes itself by providing a model context server that bridges large language models to the sandbox for performing file operations and system commands. It also includes a remote GUI sandbox that supports browser automation and desktop interfaces via remote access protocol

    Python
    View on GitHub↗11,682
  • opensquilla/opensquillaopensquilla avatar

    opensquilla/opensquilla

    4,211View on GitHub↗

    OpenSquilla is an LLM agent orchestration framework designed to coordinate multi-step AI workflows and tool execution using directed acyclic graphs. It functions as a centralized system for managing specialized skill packages and executing complex reasoning sequences. The project distinguishes itself through a routing gateway that directs tasks to different AI providers based on complexity, cost, and performance. It utilizes a multi-tier AI memory system that organizes working, episodic, and semantic knowledge using local embeddings and SQLite, alongside a secure execution sandbox that isolat

    Pythonagentaiai-agents
    View on GitHub↗4,211
  • tencentcloud/cubesandboxTencentCloud avatar

    TencentCloud/CubeSandbox

    6,519View on GitHub↗

    CubeSandbox is a Kubernetes-based platform for executing AI agents in secure, lightweight environments. It provides a code execution sandbox that uses hardware isolation and dedicated guest kernels to run untrusted code without risking the host system. The project features a network egress firewall that restricts outbound communication via domain allowlists and audit logging. It also includes a container snapshotting manager capable of capturing the runtime memory and disk state of environments to enable instant cloning and recovery. The platform covers cluster orchestration through a web-ba

    Rust
    View on GitHub↗6,519
  • daytonaio/daytonadaytonaio avatar

    daytonaio/daytona

    72,416View on GitHub↗

    Daytona is a cloud-native development environment platform designed to orchestrate ephemeral, containerized workspaces. It provides a centralized system for managing reproducible coding environments as code, ensuring consistency across distributed teams by abstracting the underlying infrastructure. By utilizing declarative configuration, the platform automates the entire lifecycle of development sandboxes, from initial provisioning to resource governance. The platform distinguishes itself through its infrastructure-agnostic runner layer, which allows development environments to be deployed ac

    TypeScriptagentic-workflowaiai-agents
    View on GitHub↗72,416
Compare all 30 related projects→