MicroVM sandboxes and team control planes that contain agent fleets

onecli

Open-source sandboxed agent harness for teams that gives every employee an isolated personal agent with gateway-injected credentials and policy enforcement.

Use caseUse it to provision per-employee agents behind a single org policy so secrets never enter agent context while still allowing Slack and dashboard control.

mastra-ai

Modern TypeScript framework for building production AI agents and workflows with model routing, memory, MCP, evals, and sandbox-backed workspaces.

Use caseUse it to scaffold a full agent app with suspend-resume workflows and Observational Memory that you can drop into Next.js or run standalone.

madarco

CLI that launches parallel coding agents inside dedicated sandboxed VMs (local Docker or cloud) with checkpoints, screen sharing, and credential isolation.

Use caseUse it to spin multiple Claude or Codex sessions in isolated boxes so one runaway agent cannot touch your host git credentials or filesystem.

superradcompany

Local-first microVM runtime and multi-language SDKs that give agents hardware-isolated environments with OCI images, secrets brokering, and MCP support.

Use caseUse it to embed sub-second microVMs in your agent loop so untrusted code runs with its own kernel without Docker daemon overhead.

CelestoAI

Secure persistent microVM computers for long-running agents with sub-second boot, browser, code execution, and state that survives sessions.

Use caseUse it to give each agent a durable computer that boots fast, persists files, and can be snapshotted for fleets of Grokbot-style workers.

opencoredev

Typed TypeScript SDK that unifies local, E2B, Daytona, Vercel Sandbox, Railway and other providers behind one createSandbox API.

Use caseUse it to write agent code once and switch sandbox backends from local AgentOS VMs to hosted providers without rewriting execution calls.

EvAlssment

Self-hostable agent sandbox with full bash/python/file tool surface, control plane, four SDKs and MCP server on real Kubernetes pod isolation.

Use caseUse it to point any agent framework at a batteries-included sandbox you run yourself with non-root pods and deny-by-default egress.

agent-substrate

High-density control plane for agent sandboxes that multiplexes many idle agents onto fewer workers with sub-second suspend/resume over Kubernetes.

Use caseUse it to schedule large fleets of agent actors onto shared workers so cold starts stay low while density stays high for RL or evals.

agentcontrol

Centralized runtime control plane that wraps model and tool calls with configurable evaluators to block injections, PII and policy violations.

Use caseUse it to enforce org-wide guardrails on LangChain, CrewAI or Strands agents via a single @control decorator without redeploying every agent.

humanlayer

Kubernetes-native Agent Control Plane for outer-loop agents with durable checkpoints, async tool calls, human feedback and full MCP support.

Use caseUse it to run unsupervised long-running agents that pause on tool calls, checkpoint conversations, and resume after human approval gates.

happyvibing

One CLI that turns any MCP server or OpenAPI spec into dynamic commands so agents discover tools on demand instead of loading every schema.

Use caseUse it to keep agent context lean by registering MCP and REST backends once then calling only the tools needed per turn from the shell.

e2b-dev

Open-source secure cloud sandboxes with real tools for enterprise agents, Firecracker isolation, and self-hostable infrastructure.

Use caseUse it to run agent-generated code in disposable microVMs with Python and JS SDKs while keeping the rest of your stack on your laptop.

smol-machines

Official multi-language SDKs for smolVM lightweight microVM sandboxes focused on secure agent code execution.

Use caseUse it to create, exec, and tear down microVMs from Node or Python in under a second for tight agent feedback loops.

assafelovic

Autonomous deep-research agent harness that produces citation-grounded reports from web and local sources with multi-agent modes.

Use caseUse it to spin a research loop that gathers sources, debates findings, and writes a verifiable report without hand-holding every query.

phenomenoner

Self-hosted Rust runtime for durable long-horizon agent tasks with virtual sessions, sandboxed reasoning jobs, and auditable receipts.

Use caseUse it to leave an agent running on hard multi-day work where continuity, compaction, and recovery are first-class and every step is receipted.

omnara-ai

Open-source managed-agent platform that handles durable execution and state while you choose models, tools, machines and interaction surfaces.

Use caseUse it to launch profile-defined coding agents on Blaxel, Daytona or your own VMs with crash recovery and multi-machine attachment.

community

Curated control-plane resources plus runtime hooks that intercept dangerous commands and secret leaks before coding agents execute them.

Use caseUse it to discover and wire policy hooks that sit outside Claude Code or Codex so risky shell calls are blocked at the gateway.

fhiltscher et al.

Security-first ranked list of agent sandboxes emphasizing deny-default egress, secrets brokering and isolation strength.

Use caseUse it to pick a sandbox whose egress and secrets model match your threat model before you wire the agent loop.

various

Living index of portable self-contained sandboxes including microVMs, containers and isolation harnesses for coding agents.

Use caseUse it to survey local-first options like BoxLite and microsandbox then clone the one that matches your OS and density needs.

clovis818

Fast isolated execution sandboxes aimed at AI agents with low cold-start latency for code and tool loops.

Use caseUse it to give agents disposable runtimes that spin up quickly for eval batches or one-shot code execution without long-lived VMs.