The Stack · Sandboxes & runtimes (managed) API

Vercel Sandbox

Ephemeral Firecracker microVMs for running untrusted/agent-generated code on Vercel — Node & Python runtimes, root access, persistent-by-default, millisecond starts.

OAuthUsage-based🔵 agent: oauth

Get API key → Billed on Active CPU (only while CPU is used) + provisioned memory (per GB-hr, 2GB/vCPU) + per Sandbox.create() call + data transfer; 32GB ephemeral NVMe per sandbox Docs Website

CategorySandboxes & runtimes (managed)

TypeAPI service

Authoauth

PricingUsage-based

Agent signup🔵 oauth

SDKsTypeScript, JavaScript, Python, CLI

Pricing: Billed on Active CPU (only while CPU is used) + provisioned memory (per GB-hr, 2GB/vCPU) + per Sandbox.create() call + data transfer; 32GB ephemeral NVMe per sandbox

🔵 Agents: oauth

OAuth — connect the account once, then agents act on its behalf.

Auth uses Vercel OIDC tokens tied to a Vercel project (auto in production, `vercel link`+`vercel env pull` locally) or account access tokens. A human sets up the Vercel project/token first; no standalone signup API.

Vercel Sandbox — Ephemeral Firecracker microVMs for running untrusted/agent-generated code on Vercel — Node & Python runtimes, root access, persistent-by-default, millisecond starts.
Website: https://vercel.com/sandbox
Docs: https://vercel.com/docs/sandbox
Get a key: https://vercel.com/signup
Agent signup: oauth — Auth uses Vercel OIDC tokens tied to a Vercel project (auto in production, `vercel link`+`vercel env pull` locally) or account access tokens. A human sets up the Vercel project/token first; no standalone signup API.
Auth: oauth
Pricing: usage-based — Billed on Active CPU (only while CPU is used) + provisioned memory (per GB-hr, 2GB/vCPU) + per Sandbox.create() call + data transfer; 32GB ephemeral NVMe per sandbox
Full record: https://dreaming.press/api/tools/vercel-sandbox.json

Machine record: /api/tools/vercel-sandbox.json

Quickstart

import { Sandbox } from "@vercel/sandbox";

const sandbox = await Sandbox.create();
const cmd = await sandbox.runCommand({ cmd: "python3", args: ["-c", "print(40 + 2)"] });
console.log(await cmd.stdout());
await sandbox.stop();

typescript · full docs →

Vercel Sandbox in our coverage

Where Should a Long-Running Agent Live? The Managed Runtime Question Just Got a Real Answer

2026-07-12

Vercel eve vs Microsoft Agent Framework: Portable Agent, or Portable Runtime?

2026-06-30

Vercel Sandbox FAQ

What is Vercel Sandbox?

Vercel Sandbox is Ephemeral Firecracker microVMs for running untrusted/agent-generated code on Vercel — Node & Python runtimes, root access, persistent-by-default, millisecond starts. It's in the Sandboxes & runtimes (managed) category of the dreaming.press tool directory.

Is Vercel Sandbox free?

Vercel Sandbox is usage-based (you pay for what you use). Billed on Active CPU (only while CPU is used) + provisioned memory (per GB-hr, 2GB/vCPU) + per Sandbox.create() call + data transfer; 32GB ephemeral NVMe per sandbox.

Can an AI agent sign up for Vercel Sandbox automatically?

Via OAuth — connect the account once and agents can then act on its behalf. Auth uses Vercel OIDC tokens tied to a Vercel project (auto in production, `vercel link`+`vercel env pull` locally) or account access tokens. A human sets up the Vercel project/token first; no standalone signup API..

Does Vercel Sandbox have an MCP server?

Vercel Sandbox does not publish an official MCP server as of our last check.

Is Vercel Sandbox open source?

Vercel Sandbox is a hosted API service, not an open-source project.

What languages does Vercel Sandbox support?

Vercel Sandbox offers TypeScript, JavaScript, Python, CLI.