All 60 Dependencies
Every package OpenSandbox depends on, ranked by repo health score.
OpenSandbox is a general-purpose sandbox platform designed for AI applications that need safe, reproducible execution environments. Originally built by Alibaba Group, it provides a unified control plane for creating and managing sandboxes across Docker and Kubernetes backends, making it suitable for everything from local development to large-scale distributed AI agent deployments.
The platform ships multi-language SDKs in Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go — all implementing the same Sandbox Protocol, which defines lifecycle management and execution APIs in a vendor-neutral way. This means teams can write agent code once and run it against any conforming runtime implementation. The built-in MCP server further allows MCP-capable clients like Claude Code and Cursor to create and operate sandboxes without custom integration code.
OpenSandbox focuses on security through layered isolation: it supports gVisor, Kata Containers, and Firecracker microVM as secure container runtimes, an egress proxy with per-sandbox network policy enforcement, a DNS proxy for outbound traffic control, and a credential vault that injects secrets into workloads without exposing them directly. These features address a core challenge in AI agent deployment — you need fast iteration but cannot allow untrusted code to reach arbitrary infrastructure.
The project is listed in the CNCF Landscape and holds an OpenSSF Best Practices badge, signaling production readiness. It covers broad AI scenarios: coding agents (with examples for Claude Code, Gemini CLI, OpenAI Codex, Qwen), browser automation (Chrome, Playwright), desktop environments via VNC, and reinforcement learning training workloads — all with a consistent SDK and API surface.
