{ "data": { "a": { "slug": "agentcore-code-interpreter", "name": "Amazon Bedrock AgentCore Code Interpreter", "vendor": "Amazon Web Services", "vendorUrl": "https://aws.amazon.com/bedrock/agentcore/", "kind": "http-api", "category": "code-sandboxes", "summary": "Amazon Bedrock AgentCore Code Interpreter is AWS's managed sandbox for running agent-written Python, JavaScript and TypeScript. Each session is a dedicated microVM, reached through the AWS API, the AgentCore SDKs or an MCP server.", "url": "https://www.anchorterminal.com/tools/agentcore-code-interpreter", "markdownUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json", "dns": "agentcore-code-interpreter.grade.anchorterminal.com", "repo": "https://github.com/aws/bedrock-agentcore-sdk-python", "license": "Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "packages": [ { "registry": "pypi", "name": "bedrock-agentcore" }, { "registry": "npm", "name": "bedrock-agentcore" }, { "registry": "pypi", "name": "boto3" }, { "registry": "pypi", "name": "awslabs.amazon-bedrock-agentcore-mcp-server" } ], "auth": "api-key", "authNotes": "AWS Signature Version 4 with IAM access keys or a role, self-serve once an AWS account exists. A policy must allow `bedrock-agentcore:StartCodeInterpreterSession`, `bedrock-agentcore:InvokeCodeInterpreter` and `bedrock-agentcore:StopCodeInterpreterSession` on the interpreter's ARN. The managed interpreter `aws.codeinterpreter.v1` needs no resource of its own. A custom interpreter takes a network mode and an execution role, which bounds the AWS resources code in the sandbox can reach. No partner or sales approval.", "pricing": "usage", "pricingNotes": "$0.0895 a vCPU-hour and $0.00945 a GB-hour, billed per second on CPU used and peak memory, with a one-second minimum and 128 MB minimum memory. AWS says I/O wait and idle time are free when no background process is running. Network data transfer is extra at EC2 rates. No allowance specific to Code Interpreter. New AWS accounts get up to $200 in Free Tier credits, and AWS says most new customers sign up without a payment method, so an agent's owner can start without a contract (https://aws.amazon.com/bedrock/agentcore/pricing/, https://aws.amazon.com/free/free-tier-faqs/, checked 2026-10-08).", "priceSummary": "$0.0895 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the Code Interpreter endpoints, in the API reference or on the pricing page. AgentCore Payments, a separate component, lets a customer's agents pay third parties over x402 and MPP and is not a way to pay AWS (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 776, "npmWeekly": 334717, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html", "llmsTxt": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs" ], "tags": [ "hosted", "usage-priced", "closed-source", "python", "typescript", "enterprise", "llms-txt", "mcp", "free-tier", "no-card", "status-page", "soc2" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 71.4, "grade": "BB", "agentReady": true, "rank": 159, "ranked": true, "rankOf": 1486, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 65, "payments": 30, "reliability": 85, "schema": 81, "security": 87, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -2, "negativeNotes": [ "2026-06-19. GHSA-6rfw-mq36-jm8h (CVE-2026-12530, high, CVSS 3.1 vector C:H/I:H), improper neutralisation of argument delimiters in the Python SDK's Code Interpreter `install_packages()`, so a crafted package name could run commands in the sandbox. Fixed in 1.6.1 and published, -1. https://osv.dev/vulnerability/GHSA-6rfw-mq36-jm8h", "2026-07-23. AWS bulletin 2026-065-AWS (CVE-2026-16796, GHSA-j6g5-3hh3-pgw8, high), the same class of flaw in `install_packages()` again, letting a remote authenticated user run arbitrary commands in the sandbox through crafted package names. Fixed in 1.18.1 and published with a workaround, -1. https://aws.amazon.com/security/security-bulletins/2026-065-aws/" ], "verdict": "Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.", "bestFor": "A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.", "strengths": [ "Each session runs in a dedicated microVM, which AWS says is terminated and has its memory sanitised when the session ends", "Billing is per second on CPU used and peak memory, at $0.0895 a vCPU-hour and $0.00945 a GB-hour, with I/O wait and idle time free", "IAM actions cover each of the nine operations, with separate ARNs for the system interpreter and custom ones", "Rate limits are published per API, 30 requests a second for `StartCodeInterpreterSession` and `InvokeCodeInterpreter`, and 1,000 concurrent sessions per account", "The managed interpreter `aws.codeinterpreter.v1` needs no resource set-up, and `code_session` in the Python SDK starts and stops a session in one block" ], "weaknesses": [ "No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC", "Every session is capped at 2 vCPU, 8 GB of memory and 10 GB of disk, and the cap is not adjustable", "`InvokeCodeInterpreter` takes one flat `arguments` object for nine operations, so the reference does not say which fields each operation requires", "The Bedrock SLA that AWS says applies to AgentCore dates from 4 October 2023 and names only the Bedrock APIs for models", "The SDK's `install_packages()` had two high-severity command-injection advisories in 2026, the second after the first fix" ], "agentNotes": [ "Start a session with `StartCodeInterpreterSession`, then pass its id in the `x-amzn-code-interpreter-session-id` header on every `InvokeCodeInterpreter` call", "Set `sessionTimeoutSeconds` when starting. The default is 900 seconds and the maximum is eight hours, and the session ends itself at the timeout", "Stop sessions when done. Billing runs per second while code is busy, and a session left open counts against the 1,000 concurrent-session quota", "Use `bedrock-agentcore` 1.18.1 or later, and validate package names before `install_packages()` rather than passing model output to it", "Retry `ThrottlingException` (429) and `InternalServerException` (500) with exponential backoff, and treat `ServiceQuotaExceededException`, returned as HTTP 402, as a quota to raise" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.4 } ], "editorialScores": { "ergonomics": 75, "maintenance": 65, "payments": 30, "reliability": 85, "schema": 81, "security": 87, "transparency": 51 }, "provenanceScore": 94, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "lastMoved": "2026-10-27", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install bedrock-agentcore # or: npm i bedrock-agentcore", "http": "awscurl -X POST \\\n \"https://bedrock-agentcore.us-west-2.amazonaws.com/code-interpreters/aws.codeinterpreter.v1/tools/invoke\" \\\n -H \"Content-Type: application/json\" \\\n -H \"x-amzn-code-interpreter-session-id: $SESSION_ID\" \\\n --service bedrock-agentcore --region us-west-2 \\\n -d '{\"name\":\"executeCode\",\"arguments\":{\"language\":\"python\",\"code\":\"print(\\\"Hello, world!\\\")\"}}'", "config": { "mcpServers": { "bedrock-agentcore-mcp-server": { "args": [ "awslabs.amazon-bedrock-agentcore-mcp-server@latest" ], "command": "uvx", "env": { "AGENTCORE_ENABLE_TOOLS": "code_interpreter", "FASTMCP_LOG_LEVEL": "ERROR" } } } } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/agentcore-code-interpreter" }, "sameCompany": [ "amazon-bedrock-customization", "amazon-textract", "aws-end-user-messaging", "amazon-sns", "amazon-s3", "amazon-eventbridge" ], "area": "agent-runtime", "unitPrices": [ { "item": "CPU", "unit": "vcpu-hour", "usd": 0.0895, "note": "Billed per second on CPU used. Memory extra at $0.00945 a GB-hour on peak use" }, { "item": "Session at the 2 vCPU, 8 GB cap, fully busy", "unit": "session-hour", "usd": 0.2546, "note": "Our sum of 2 x $0.0895 and 8 x $0.00945. I/O wait and idle time are not billed" } ], "provenance": { "legalEntity": "Amazon Web Services, Inc.", "domain": "amazonaws.com", "domainRegistered": "2005-08-18", "endpointOnVendorDomain": true, "terms": "https://aws.amazon.com/service-terms/", "privacy": "https://aws.amazon.com/privacy/", "statusPage": "https://health.aws.amazon.com/health/status", "changelog": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/release-notes.html", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The endpoints are `bedrock-agentcore.\u003cregion\u003e.amazonaws.com`. RDAP gives 2005-08-18 for amazonaws.com and 1994-11-01 for amazon.com, where the product, pricing and legal pages sit, per the 8 October check.", "The AWS Service Terms were last updated on 13 October 2026. Section 50 covers Amazon Bedrock, and 50.15 covers AgentCore Payments. No clause naming Code Interpreter was found.", "The AWS Privacy Notice, last updated 18 May 2026, names Amazon Web Services, Inc. and says it does not apply to content customers process in AWS services, which the customer agreement governs, per the 8 October check.", "aws.amazon.com/.well-known/security.txt has Contact, Policy and Encryption fields. Its Expires date of 2026-09-24 had passed on 8 October, and on 17 October it reads Expires 2027-10-16.", "AgentCore release notes carry a month for each entry, not a day." ], "score": 94 }, "requirements": { "setupChecked": true, "complianceChecked": true, "card": "unknown", "freeTier": true, "minutes": 15, "credential": "cloud-iam", "hosting": [ "US", "EU", "UK", "CA", "APAC" ], "euResidency": "yes", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II", "ISO 27001", "ISO 27701", "HIPAA (BAA available)", "FedRAMP", "CSA STAR", "GDPR" ], "dpa": true, "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.json", "live": { "slug": "agentcore-code-interpreter", "probe": { "target": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "method": "get", "lastAt": "2026-11-07T18:20:08.66103505Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "invalid character \"{\" in host name", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 239, "samples30d": 7289, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 0 }, { "date": "2026-10-10", "probes": 247, "ok": 0 }, { "date": "2026-10-11", "probes": 247, "ok": 0 }, { "date": "2026-10-12", "probes": 247, "ok": 0 }, { "date": "2026-10-13", "probes": 248, "ok": 0 }, { "date": "2026-10-14", "probes": 249, "ok": 0 }, { "date": "2026-10-15", "probes": 253, "ok": 0 }, { "date": "2026-10-16", "probes": 252, "ok": 0 }, { "date": "2026-10-17", "probes": 253, "ok": 0 }, { "date": "2026-10-18", "probes": 256, "ok": 0 }, { "date": "2026-10-19", "probes": 255, "ok": 0 }, { "date": "2026-10-20", "probes": 252, "ok": 0 }, { "date": "2026-10-21", "probes": 253, "ok": 0 }, { "date": "2026-10-22", "probes": 253, "ok": 0 }, { "date": "2026-10-23", "probes": 248, "ok": 0 }, { "date": "2026-10-24", "probes": 251, "ok": 0 }, { "date": "2026-10-25", "probes": 250, "ok": 0 }, { "date": "2026-10-26", "probes": 252, "ok": 0 }, { "date": "2026-10-27", "probes": 249, "ok": 0 }, { "date": "2026-10-28", "probes": 251, "ok": 0 }, { "date": "2026-10-29", "probes": 249, "ok": 0 }, { "date": "2026-10-30", "probes": 248, "ok": 0 }, { "date": "2026-10-31", "probes": 251, "ok": 0 }, { "date": "2026-11-01", "probes": 249, "ok": 0 }, { "date": "2026-11-02", "probes": 250, "ok": 0 }, { "date": "2026-11-03", "probes": 248, "ok": 0 }, { "date": "2026-11-04", "probes": 246, "ok": 0 }, { "date": "2026-11-05", "probes": 185, "ok": 0 }, { "date": "2026-11-06", "probes": 241, "ok": 0 }, { "date": "2026-11-07", "probes": 187, "ok": 0 } ], "outages": [ { "start": "2026-10-09T07:40:18.24415355Z", "end": "0001-01-01T00:00:00Z", "note": "invalid character \"{\" in host name" } ] }, "vendorStatus": { "page": "https://health.aws.amazon.com/health/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:47:04.671666508Z" }, "versions": [ { "registry": "github", "name": "aws/bedrock-agentcore-sdk-python", "version": "v1.25.4", "released": "2026-11-06", "seenAt": "2026-11-06T23:03:24.948062643Z" }, { "registry": "npm", "name": "bedrock-agentcore", "version": "0.4.6", "seenAt": "2026-11-06T23:03:21.33155772Z" }, { "registry": "pypi", "name": "awslabs.amazon-bedrock-agentcore-mcp-server", "version": "0.2.1", "released": "2026-09-08", "seenAt": "2026-11-06T23:03:22.901936155Z" }, { "registry": "pypi", "name": "bedrock-agentcore", "version": "1.25.4", "released": "2026-11-06", "seenAt": "2026-11-06T23:03:20.836255532Z" }, { "registry": "pypi", "name": "boto3", "version": "1.43.126", "released": "2026-11-06", "seenAt": "2026-11-06T23:03:22.867339537Z" } ], "githubStars": 783, "npmWeekly": 354952, "pypiWeekly": 1658205, "securityTxt": { "url": "https://amazonaws.com/.well-known/security.txt", "state": "valid", "expires": "2027-10-16T16:25:03.000Z", "checkedAt": "2026-11-07T16:01:20.771828423Z" }, "llmsTxt": { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:05.867141478Z" }, "domain": { "domain": "amazonaws.com", "registered": "2005-08-18", "source": "https://rdap.verisign.com/com/v1/domain/amazonaws.com", "checkedAt": "2026-11-01T14:19:22.344066529Z" }, "pages": [ { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/release-notes.html", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:05:07.521005443Z", "changedAt": "2026-11-07T14:05:07.521005443Z", "fingerprint": "a734cc4a58f4" }, { "url": "https://aws.amazon.com/bedrock/agentcore/pricing/", "kind": "pricing", "status": 304, "checkedAt": "2026-11-07T13:59:54.739248381Z", "changedAt": "2026-11-06T13:22:41.478419024Z", "fingerprint": "410aa59bd287" }, { "url": "https://aws.amazon.com/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:00:06.594354086Z", "changedAt": "2026-11-06T13:22:52.526874505Z", "fingerprint": "5d55ba617eae" }, { "url": "https://aws.amazon.com/service-terms/", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:00:12.601462422Z", "changedAt": "2026-11-06T13:22:58.456239478Z", "fingerprint": "4a7b4dc90b82" } ], "github": { "repo": "aws/bedrock-agentcore-sdk-python", "checkedAt": "2026-11-02T08:33:22.483521011Z", "stars": 782, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T13:45:55Z", "openIssues": 82, "openPRs": 51, "issuesOpened90d": 25, "issuesClosed90d": 13, "prsMerged90d": 46, "ci": { "branch": "main", "runs": 50, "success": 45, "failure": 5, "other": 0, "latest": "success", "latestAt": "2026-10-30T13:47:31Z" }, "advisories": [ { "ghsa": "GHSA-j6g5-3hh3-pgw8", "cve": "CVE-2026-16796", "severity": "high", "published": "2026-07-23T20:11:08Z" }, { "ghsa": "GHSA-hqf8-7w95-9r33", "cve": "CVE-2026-15737", "severity": "medium", "published": "2026-07-16T17:05:36Z" }, { "ghsa": "GHSA-6rfw-mq36-jm8h", "cve": "CVE-2026-12530", "severity": "high", "published": "2026-06-17T21:10:20Z" } ], "replies": { "sampled": 25, "unanswered": 13, "medianDays": 9.9 } }, "updatedAt": "2026-11-07T18:20:08.66103505Z" } }, "answer": "Amazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 4 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "celesto", "name": "Celesto (formerly SmolVM)", "vendor": "Celesto AI, Inc.", "vendorUrl": "https://celesto.ai", "kind": "sdk", "category": "code-sandboxes", "summary": "Celesto, formerly SmolVM, is an open-source Python SDK and CLI from Celesto AI that runs disposable Firecracker or QEMU microVMs on the owner's machine for agent code, browsers and desktops, with an optional paid Celesto Cloud.", "url": "https://www.anchorterminal.com/tools/celesto", "markdownUrl": "https://www.anchorterminal.com/tools/celesto.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/celesto.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/celesto.json", "dns": "celesto.grade.anchorterminal.com", "repo": "https://github.com/CelestoAI/Celesto", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "celesto" } ], "auth": "none", "authNotes": "Local use needs no account or key. The local API server and dashboard each require a bearer token, generated at start or read from CELESTO_SERVER_TOKEN and CELESTO_DASHBOARD_TOKEN. Celesto Cloud uses an organisation-bound CELESTO_API_KEY with named permissions (see, execute, delete) set in the dashboard.", "pricing": "freemium", "pricingNotes": "The local SDK and CLI are free under Apache-2.0. Celesto Cloud bills sandboxes by the running hour from $0.015 (Micro, 1 vCPU, 2 GB) to $0.16 (XL, 8 vCPU, 32 GB), prepaid from $2.01, with a one-time $5 Micro credit and no card.", "priceSummary": "$0.015 / session-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs, llms.txt or the pricing page (checked 2026-11-06). Cloud runtime is prepaid by card under Settings \u003e Billing.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1149, "npmWeekly": null, "pypiWeekly": 699, "asOf": "2026-11-06" }, "docsUrl": "https://celesto.ai/docs", "llmsTxt": "https://celesto.ai/llms.txt", "openapi": "https://github.com/CelestoAI/Celesto/blob/main/ts/celesto-local-server.openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "no-card", "free-tier", "apache-2.0", "python", "typescript", "cli", "microvm", "firecracker", "llms-txt", "openapi", "telemetry", "pre-1.0", "renamed" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 298, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "bestFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "strengths": [ "Apache-2.0, installs from PyPI with `celesto setup` and `celesto doctor`, and runs local microVMs with no account or key", "Every `--json` response has the same `ok`, `command`, `exit_code`, `data` and `error` fields, with recovery commands in errors", "Network modes `off`, `public` (proxy that rejects private and metadata addresses) and `restricted` with CIDR or domain allowlists", "Dated changelog with Security sections, breaking changes marked, and 22 PyPI releases in the 90 days to 6 November 2026", "OpenAPI documents for the local server (24 operations) and the cloud API (171 operations) in the repository, plus llms.txt" ], "weaknesses": [ "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball", "Outbound network access is open by default, and Linux TAP mode does not block every private network or metadata service", "Usage telemetry to PostHog is on after a first-use notice, until switched off", "Renamed from SmolVM on 19 September 2026 in a breaking release that removed the `smolvm` command and import path", "No security.txt, bug bounty or certification found, and CI results could not be read" ], "agentNotes": [ "Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text", "Create computers with unique names and delete them by exact name when the job ends, including after failures", "Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open", "Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine", "Never paste browser or display connection URLs into model context; possession of the URL grants control" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 74 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install celesto \u0026\u0026 celesto setup \u0026\u0026 celesto doctor", "headless": { "create": "celesto computer create --name agent-job --json", "delete": "celesto computer delete agent-job --json", "exec": "celesto computer exec agent-job --json -- python -m pytest" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/celesto" }, "area": "agent-runtime", "unitPrices": [ { "item": "Cloud Micro sandbox (1 vCPU, 2 GB)", "unit": "session-hour", "usd": 0.015, "note": "Billed by the running hour; local use is free" }, { "item": "Cloud XL sandbox (8 vCPU, 32 GB)", "unit": "session-hour", "usd": 0.16, "note": "Largest size on the pricing page" } ], "provenance": { "legalEntity": "Celesto AI, Inc.", "domain": "celesto.ai", "domainRegistered": "2025-07-13", "endpointOnVendorDomain": null, "terms": "https://celesto.ai/legal/terms", "privacy": "https://celesto.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The privacy policy, last updated 30 October 2026, names Celesto AI, Inc., a Delaware corporation with a Wilmington mailing address. It has no clause on automated access.", "celesto.ai/robots.txt allows all crawlers. docs.celesto.ai carries Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives celesto.ai a registration date of 13 July 2025.", "/.well-known/security.txt returns 404. SECURITY.md asks for private reports through GitHub's vulnerability reporting. No status page is linked from the pricing page." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/celesto.json", "live": { "slug": "celesto", "versions": [ { "registry": "github", "name": "CelestoAI/Celesto", "version": "v0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.416837168Z" }, { "registry": "pypi", "name": "celesto", "version": "0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.309276304Z" } ], "githubStars": 1149, "pypiWeekly": 699, "securityTxt": { "url": "https://celesto.ai/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-07T16:01:01.176888246Z" }, "llmsTxt": { "url": "https://celesto.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:46.784166983Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/CelestoAI/Celesto/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:00.719411253Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8ddae4a6adbd" }, { "url": "https://celesto.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:00:50.868104256Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87ce310b1db6" }, { "url": "https://celesto.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:00:53.107282947Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1dece6f9a42e" } ], "updatedAt": "2026-11-07T16:01:01.176888246Z" } }, "edges": [ { "by": 35, "category": "security", "leads": "agentcore-code-interpreter", "name": "Security \u0026 auth", "reasons": { "a": "IAM with SigV4, roles and short-lived credentials, and policies can name one interpreter ARN (30). Each of the nine operations is its own IAM action, system and custom interpreters have separate ARN types, a custom interpreter's execution role bounds what sandbox code can reach, and the default Sandbox network mode reaches only Amazon S3. No approval step for destructive calls (17 of 20). Each session is a dedicated microVM whose memory AWS says is sanitised at the end, and the docs flag Public network mode as a risk, but the Code Interpreter pages we read give no guidance on treating execution output as untrusted. The SDK's `install_packages()` needed two fixes in 2026 for package-name arguments that could run commands in the sandbox, and AWS's workaround is to keep model-generated input away from it (11 of 15). CloudWatch metrics, spans and per-second usage logs per session, and the overview claims CloudTrail logging, but we found no page listing Code Interpreter's CloudTrail events, and console logs are not sent to CloudWatch (11 of 15). A vulnerability disclosure programme on HackerOne, public bulletins with CVEs for the SDK advisories, and AgentCore in SOC 1, 2 and 3 scope on the list of 11 August 2026. The security.txt on aws.amazon.com, expired from 24 September, was renewed by 17 October with Expires 2027-10-16. No paid bounty was found, so 18, as on the Polly, S3 and Secrets Manager re-checks of 17 October (18 of 20).", "b": "Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52." }, "scores": { "a": 87, "b": 52 } }, { "by": 30, "category": "payments", "leads": "celesto", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 on the Code Interpreter endpoints. AgentCore Payments is a separate component for an agent paying third parties (0). Per-unit prices published without a login, $0.0895 a vCPU-hour and $0.00945 a GB-hour (20). No allowance for Code Interpreter, but the pricing page says new AWS customers get up to $200 in Free Tier credits and the Free Tier FAQ says most new customers need no payment method, so half, as on the other AWS listings (10). A person signs up in a browser and sets up IAM (0).", "b": "Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60." }, "scores": { "a": 30, "b": 60 } }, { "by": 19, "category": "reliability", "leads": "agentcore-code-interpreter", "name": "Reliability", "reasons": { "a": "Graded on the hosted lines, for the AWS API. AWS Health Dashboard with per-service, per-Region history (20). The dashboard history file, re-read on 17 October, names AgentCore in one event in the 90 days, elevated packet loss in one availability zone of Europe (Spain) for 2 hours 40 minutes on 4 October 2026, marked informational, and no AgentCore event after it. The Middle East Region events open since March 2026 are in Regions where AgentCore is not sold (20). Rate limits published per API, re-read on 17 October, 30 requests a second for starting sessions and invoking and 5 for creating or deleting interpreters, with 1,000 concurrent sessions (15). `ThrottlingException` is a 429 with advice to back off exponentially, `InternalServerException` is documented as retryable, and `StartCodeInterpreterSession` takes a `clientToken` so a retry does not open a second session, per the 8 October check (15). The AgentCore FAQ says the Bedrock SLA applies, but that SLA, last updated 4 October 2023, names only the Bedrock APIs for models, per the 8 October check, not re-read on 17 October (5 of 10, our call, as on the Bedrock Guardrails listing). Generally available since October 2025 (10).", "b": "Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66." }, "scores": { "a": 85, "b": 66 } }, { "by": 16, "category": "maintenance", "leads": "celesto", "name": "Maintenance \u0026 community", "reasons": { "a": "The Python SDK that carries `code_session` shipped 1.24.1 on 7 October 2026 (tagged 6 October) and is still the latest tag on 17 October. The newest change to Code Interpreter itself is the API model update of 23 July 2026, which added `filesystemConfigurations` for Amazon S3 Files and EFS mounts, 86 days before 17 October, alongside the `ActiveSessionCount` metric that month. No Code Interpreter entry in the September or October release notes, so 20 of 30 as a judgement call (20). The SDK has had eight tagged releases since 28 July and the release notes have entries every month, yet few touch Code Interpreter (10 of 20). Public release notes with RSS, issues open on the SDK repository with an auto-triage workflow, and re:Post and AWS Support. Reply times were not checked (10 of 15). Current official SDKs, `bedrock-agentcore` 1.24.1 on PyPI and 0.4.5 on npm (15). The SDK repository runs CI, integration tests, security scanning and a breaking-change check, with a lock file, and since 5 October requires approval before a release is published (10).", "b": "0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81." }, "scores": { "a": 65, "b": 81 } }, { "by": 6, "category": "ergonomics", "leads": "agentcore-code-interpreter", "name": "Agent ergonomics", "reasons": { "a": "Results stream back as content blocks with stdout and stderr, and we found no control for truncating or sizing output. The MCP server registers 122 tools by default and `AGENTCORE_ENABLE_TOOLS` cuts that to the 10 for Code Interpreter (15 of 25). `ListCodeInterpreterSessions` pages with `maxResults` of 1 to 100 and `nextToken` and filters by status (15 of 20). Typed errors with HTTP codes, but a quota breach comes back as HTTP 402 and errors can also arrive inside the result stream (15 of 20). `clientToken` on session start and on interpreter create and delete. Running code has no idempotency key (15 of 20). The managed interpreter needs no set-up, `code_session` handles start and stop, and there are AgentCore SDKs for Python and TypeScript beside the AWS SDKs (15).", "b": "A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69." }, "scores": { "a": 75, "b": 69 } } ], "facts": [ { "a": "HTTP API", "b": "SDK + MCP", "name": "Kind" }, { "a": "Amazon Web Services", "b": "Celesto AI, Inc.", "name": "Vendor" }, { "a": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "", "name": "Transports" }, { "a": "API key", "b": "None", "name": "Auth" }, { "a": "Pay per use", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-11-05", "name": "Last release" }, { "a": "2026-10-01", "b": "2026-10-30", "name": "Terms last updated" }, { "a": "2026-05-18", "b": "2026-10-30", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "776 stars, 335k npm/wk", "b": "1.1k stars, 699 PyPI/wk", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Amazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 4 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Amazon Bedrock AgentCore Code Interpreter or Celesto (formerly SmolVM)?" }, { "answer": "Amazon Bedrock AgentCore Code Interpreter has a hosted endpoint at https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke. No hosted endpoint is listed for Celesto (formerly SmolVM).", "question": "Can an agent call Amazon Bedrock AgentCore Code Interpreter and Celesto (formerly SmolVM) without installing anything?" }, { "answer": "No open-source release is listed for Amazon Bedrock AgentCore Code Interpreter. Celesto (formerly SmolVM) is open source (Apache-2.0).", "question": "Are Amazon Bedrock AgentCore Code Interpreter and Celesto (formerly SmolVM) open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 85 against 66", "Agent ergonomics, 75 against 69", "Security \u0026 auth, 87 against 52" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install" ], "goodFor": "A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.", "slug": "agentcore-code-interpreter", "watchFor": "No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC" }, { "aheadOn": [ "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 81 against 65" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "slug": "celesto", "watchFor": "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball" } ], "history": { "agentcore-code-interpreter": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 71.3, "fromGrade": "BB", "to": 71.4, "toGrade": "BB" }, { "causes": [ "security", "event" ], "date": "2026-10-17", "delta": -1.8, "from": 73.1, "fromGrade": "BB", "to": 71.3, "toGrade": "BB" } ], "celesto": null }, "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter.json", "title": "Agent 37 Cloud vs Amazon Bedrock AgentCore Code Interpreter", "url": "https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Blaxel Sandboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Daytona", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs E2B", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Freestyle", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-instavm.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs InstaVM", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-instavm" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Maritime", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Offscreen", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs SPACE", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sprites", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.json", "title": "Blaxel Sandboxes vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.json", "title": "Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-daytona.json", "title": "Celesto (formerly SmolVM) vs Daytona", "url": "https://www.anchorterminal.com/compare/celesto-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.json", "title": "Celesto (formerly SmolVM) vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.json", "title": "Celesto (formerly SmolVM) vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-e2b.json", "title": "Celesto (formerly SmolVM) vs E2B", "url": "https://www.anchorterminal.com/compare/celesto-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-freestyle.json", "title": "Celesto (formerly SmolVM) vs Freestyle", "url": "https://www.anchorterminal.com/compare/celesto-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-instavm.json", "title": "Celesto (formerly SmolVM) vs InstaVM", "url": "https://www.anchorterminal.com/compare/celesto-vs-instavm" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-maritime.json", "title": "Celesto (formerly SmolVM) vs Maritime", "url": "https://www.anchorterminal.com/compare/celesto-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.json", "title": "Celesto (formerly SmolVM) vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.json", "title": "Celesto (formerly SmolVM) vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.json", "title": "Celesto (formerly SmolVM) vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-offscreen.json", "title": "Celesto (formerly SmolVM) vs Offscreen", "url": "https://www.anchorterminal.com/compare/celesto-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.json", "title": "Celesto (formerly SmolVM) vs SPACE", "url": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-runloop.json", "title": "Celesto (formerly SmolVM) vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0.json", "title": "Celesto (formerly SmolVM) vs Sandbox0", "url": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sprites.json", "title": "Celesto (formerly SmolVM) vs Sprites", "url": "https://www.anchorterminal.com/compare/celesto-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.json", "title": "Celesto (formerly SmolVM) vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.json", "title": "Celesto (formerly SmolVM) vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-celesto.json", "title": "Agent 37 Cloud vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/agent37-vs-celesto" } ], "panel": null, "scores": [ { "agentcore-code-interpreter": 85, "by": 19, "celesto": 66, "edge": "agentcore-code-interpreter", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agentcore-code-interpreter": 81, "by": 4, "celesto": 85, "edge": "celesto", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "agentcore-code-interpreter": 75, "by": 6, "celesto": 69, "edge": "agentcore-code-interpreter", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "agentcore-code-interpreter": 87, "by": 35, "celesto": 52, "edge": "agentcore-code-interpreter", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "agentcore-code-interpreter": 30, "by": 30, "celesto": 60, "edge": "celesto", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agentcore-code-interpreter": 65, "by": 16, "celesto": 81, "edge": "celesto", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "agentcore-code-interpreter": 73, "by": 3, "celesto": 70, "edge": "agentcore-code-interpreter", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Amazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 4 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing and maintenance \u0026 community. Both do code sandboxes.", "tasks": null, "tutorials": [], "verdicts": { "agentcore-code-interpreter": "Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.", "celesto": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto", "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.min.md" }, "markdown": "Amazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 4 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing and maintenance \u0026 community. Both do code sandboxes.\n\n- Amazon Bedrock AgentCore Code Interpreter: grade BB, 71.4/100, rank #159 of 1486. Markdown https://www.anchorterminal.com/tools/agentcore-code-interpreter.md · JSON https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json\n- Celesto (formerly SmolVM): grade B, 68/100, rank #298 of 1486. Markdown https://www.anchorterminal.com/tools/celesto.md · JSON https://www.anchorterminal.com/api/v1/tools/celesto.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 231 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Amazon Bedrock AgentCore Code Interpreter (BB)\n\nGood for: A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.\n\nAhead on:\n- Reliability, 85 against 66\n- Agent ergonomics, 75 against 69\n- Security \u0026 auth, 87 against 52\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n\nWatch for: No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC\n\n### Celesto (formerly SmolVM) (B)\n\nGood for: Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 81 against 65\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball\n\n\n## Why the edge\n\n### Security \u0026 auth: Amazon Bedrock AgentCore Code Interpreter +35\n\n- Amazon Bedrock AgentCore Code Interpreter (87): IAM with SigV4, roles and short-lived credentials, and policies can name one interpreter ARN (30). Each of the nine operations is its own IAM action, system and custom interpreters have separate ARN types, a custom interpreter's execution role bounds what sandbox code can reach, and the default Sandbox network mode reaches only Amazon S3. No approval step for destructive calls (17 of 20). Each session is a dedicated microVM whose memory AWS says is sanitised at the end, and the docs flag Public network mode as a risk, but the Code Interpreter pages we read give no guidance on treating execution output as untrusted. The SDK's `install_packages()` needed two fixes in 2026 for package-name arguments that could run commands in the sandbox, and AWS's workaround is to keep model-generated input away from it (11 of 15). CloudWatch metrics, spans and per-second usage logs per session, and the overview claims CloudTrail logging, but we found no page listing Code Interpreter's CloudTrail events, and console logs are not sent to CloudWatch (11 of 15). A vulnerability disclosure programme on HackerOne, public bulletins with CVEs for the SDK advisories, and AgentCore in SOC 1, 2 and 3 scope on the list of 11 August 2026. The security.txt on aws.amazon.com, expired from 24 September, was renewed by 17 October with Expires 2027-10-16. No paid bounty was found, so 18, as on the Polly, S3 and Secrets Manager re-checks of 17 October (18 of 20).\n- Celesto (formerly SmolVM) (52): Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.\n\n### Payments \u0026 pricing: Celesto (formerly SmolVM) +30\n\n- Amazon Bedrock AgentCore Code Interpreter (30): No x402, MPP or L402 on the Code Interpreter endpoints. AgentCore Payments is a separate component for an agent paying third parties (0). Per-unit prices published without a login, $0.0895 a vCPU-hour and $0.00945 a GB-hour (20). No allowance for Code Interpreter, but the pricing page says new AWS customers get up to $200 in Free Tier credits and the Free Tier FAQ says most new customers need no payment method, so half, as on the other AWS listings (10). A person signs up in a browser and sets up IAM (0).\n- Celesto (formerly SmolVM) (60): Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60.\n\n### Reliability: Amazon Bedrock AgentCore Code Interpreter +19\n\n- Amazon Bedrock AgentCore Code Interpreter (85): Graded on the hosted lines, for the AWS API. AWS Health Dashboard with per-service, per-Region history (20). The dashboard history file, re-read on 17 October, names AgentCore in one event in the 90 days, elevated packet loss in one availability zone of Europe (Spain) for 2 hours 40 minutes on 4 October 2026, marked informational, and no AgentCore event after it. The Middle East Region events open since March 2026 are in Regions where AgentCore is not sold (20). Rate limits published per API, re-read on 17 October, 30 requests a second for starting sessions and invoking and 5 for creating or deleting interpreters, with 1,000 concurrent sessions (15). `ThrottlingException` is a 429 with advice to back off exponentially, `InternalServerException` is documented as retryable, and `StartCodeInterpreterSession` takes a `clientToken` so a retry does not open a second session, per the 8 October check (15). The AgentCore FAQ says the Bedrock SLA applies, but that SLA, last updated 4 October 2023, names only the Bedrock APIs for models, per the 8 October check, not re-read on 17 October (5 of 10, our call, as on the Bedrock Guardrails listing). Generally available since October 2025 (10).\n- Celesto (formerly SmolVM) (66): Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.\n\n### Maintenance \u0026 community: Celesto (formerly SmolVM) +16\n\n- Amazon Bedrock AgentCore Code Interpreter (65): The Python SDK that carries `code_session` shipped 1.24.1 on 7 October 2026 (tagged 6 October) and is still the latest tag on 17 October. The newest change to Code Interpreter itself is the API model update of 23 July 2026, which added `filesystemConfigurations` for Amazon S3 Files and EFS mounts, 86 days before 17 October, alongside the `ActiveSessionCount` metric that month. No Code Interpreter entry in the September or October release notes, so 20 of 30 as a judgement call (20). The SDK has had eight tagged releases since 28 July and the release notes have entries every month, yet few touch Code Interpreter (10 of 20). Public release notes with RSS, issues open on the SDK repository with an auto-triage workflow, and re:Post and AWS Support. Reply times were not checked (10 of 15). Current official SDKs, `bedrock-agentcore` 1.24.1 on PyPI and 0.4.5 on npm (15). The SDK repository runs CI, integration tests, security scanning and a breaking-change check, with a lock file, and since 5 October requires approval before a release is published (10).\n- Celesto (formerly SmolVM) (81): 0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81.\n\n### Agent ergonomics: Amazon Bedrock AgentCore Code Interpreter +6\n\n- Amazon Bedrock AgentCore Code Interpreter (75): Results stream back as content blocks with stdout and stderr, and we found no control for truncating or sizing output. The MCP server registers 122 tools by default and `AGENTCORE_ENABLE_TOOLS` cuts that to the 10 for Code Interpreter (15 of 25). `ListCodeInterpreterSessions` pages with `maxResults` of 1 to 100 and `nextToken` and filters by status (15 of 20). Typed errors with HTTP codes, but a quota breach comes back as HTTP 402 and errors can also arrive inside the result stream (15 of 20). `clientToken` on session start and on interpreter create and delete. Running code has no idempotency key (15 of 20). The managed interpreter needs no set-up, `code_session` handles start and stop, and there are AgentCore SDKs for Python and TypeScript beside the AWS SDKs (15).\n- Celesto (formerly SmolVM) (69): A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69.\n\n## Score by category\n\n| Category | Weight | Amazon Bedrock AgentCore Code Interpreter | Celesto (formerly SmolVM) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 85 | 66 | Amazon Bedrock AgentCore Code Interpreter +19 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 85 | Celesto (formerly SmolVM) +4 |\n| Agent ergonomics | 13% (16.2 this run) | 75 | 69 | Amazon Bedrock AgentCore Code Interpreter +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 87 | 52 | Amazon Bedrock AgentCore Code Interpreter +35 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | Celesto (formerly SmolVM) +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 65 | 81 | Celesto (formerly SmolVM) +16 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 70 | Amazon Bedrock AgentCore Code Interpreter +3 |\n| Negative events | ≤15 | -2 | 0 | |\n| **Total** | | **71.4 · BB** | **68 · B** | |\n\n## Facts side by side\n\n| Fact | Amazon Bedrock AgentCore Code Interpreter | Celesto (formerly SmolVM) |\n| --- | --- | --- |\n| Kind | HTTP API | SDK + MCP |\n| Vendor | Amazon Web Services | Celesto AI, Inc. |\n| Hosted endpoint | `https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke` | no (local only) |\n| Transports | HTTP | |\n| Auth | API key | None |\n| Pricing | Pay per use | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-07 | 2026-11-05 |\n| Terms last updated | 2026-10-01 | 2026-10-30 |\n| Privacy policy last updated | 2026-05-18 | 2026-10-30 |\n| Customer content may train models | yes, with an opt-out | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 776 stars, 335k npm/wk | 1.1k stars, 699 PyPI/wk |\n| Agent reviews | 3.3/5 (4) | none |\n\n## How the scores have moved\n\n### Amazon Bedrock AgentCore Code Interpreter\n\n- +0.1 on 27 October 2026: checklist\n- -1.8 on 17 October 2026: security, negative event\n\n### Celesto (formerly SmolVM)\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Amazon Bedrock AgentCore Code Interpreter.** Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.\n\n**Celesto (formerly SmolVM).** Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.\n\n## Before you call either\n\n### Amazon Bedrock AgentCore Code Interpreter\n\n1. Start a session with `StartCodeInterpreterSession`, then pass its id in the `x-amzn-code-interpreter-session-id` header on every `InvokeCodeInterpreter` call\n2. Set `sessionTimeoutSeconds` when starting. The default is 900 seconds and the maximum is eight hours, and the session ends itself at the timeout\n3. Stop sessions when done. Billing runs per second while code is busy, and a session left open counts against the 1,000 concurrent-session quota\n4. Use `bedrock-agentcore` 1.18.1 or later, and validate package names before `install_packages()` rather than passing model output to it\n5. Retry `ThrottlingException` (429) and `InternalServerException` (500) with exponential backoff, and treat `ServiceQuotaExceededException`, returned as HTTP 402, as a quota to raise\n\n### Celesto (formerly SmolVM)\n\n1. Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text\n2. Create computers with unique names and delete them by exact name when the job ends, including after failures\n3. Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open\n4. Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine\n5. Never paste browser or display connection URLs into model context; possession of the URL grants control\n\n## Questions\n\n### Which is better for AI agents, Amazon Bedrock AgentCore Code Interpreter or Celesto (formerly SmolVM)?\n\nAmazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 4 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing and maintenance \u0026 community.\n\n### Can an agent call Amazon Bedrock AgentCore Code Interpreter and Celesto (formerly SmolVM) without installing anything?\n\nAmazon Bedrock AgentCore Code Interpreter has a hosted endpoint at https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke. No hosted endpoint is listed for Celesto (formerly SmolVM).\n\n### Are Amazon Bedrock AgentCore Code Interpreter and Celesto (formerly SmolVM) open source?\n\nNo open-source release is listed for Amazon Bedrock AgentCore Code Interpreter. Celesto (formerly SmolVM) is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentcore-code-interpreter\", \"b\": \"celesto\"}`. From a terminal: `anchor compare agentcore-code-interpreter celesto`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json and https://www.anchorterminal.com/api/v1/tools/celesto.json\n\n## Other comparisons with Amazon Bedrock AgentCore Code Interpreter or Celesto (formerly SmolVM)\n\n- [Agent 37 Cloud vs Amazon Bedrock AgentCore Code Interpreter](https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Blaxel Sandboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Daytona](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs E2B](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Freestyle](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs InstaVM](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-instavm.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Maritime](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Modal Sandboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Morph Cloud](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Offscreen](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs SPACE](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Runloop Devboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sandbox0](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sprites](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Together Code Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.md)\n- [Blaxel Sandboxes vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.md)\n- [Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.md)\n- [Celesto (formerly SmolVM) vs Daytona](https://www.anchorterminal.com/compare/celesto-vs-daytona.md)\n- [Celesto (formerly SmolVM) vs DeltaBox Lite](https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.md)\n- [Celesto (formerly SmolVM) vs Deno Sandbox](https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.md)\n- [Celesto (formerly SmolVM) vs E2B](https://www.anchorterminal.com/compare/celesto-vs-e2b.md)\n- [Celesto (formerly SmolVM) vs Freestyle](https://www.anchorterminal.com/compare/celesto-vs-freestyle.md)\n- [Celesto (formerly SmolVM) vs InstaVM](https://www.anchorterminal.com/compare/celesto-vs-instavm.md)\n- [Celesto (formerly SmolVM) vs Maritime](https://www.anchorterminal.com/compare/celesto-vs-maritime.md)\n- [Celesto (formerly SmolVM) vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.md)\n- [Celesto (formerly SmolVM) vs Modal Sandboxes](https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.md)\n- [Celesto (formerly SmolVM) vs Morph Cloud](https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.md)\n- [Celesto (formerly SmolVM) vs Offscreen](https://www.anchorterminal.com/compare/celesto-vs-offscreen.md)\n- [Celesto (formerly SmolVM) vs SPACE](https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.md)\n- [Celesto (formerly SmolVM) vs Runloop Devboxes](https://www.anchorterminal.com/compare/celesto-vs-runloop.md)\n- [Celesto (formerly SmolVM) vs Sandbox0](https://www.anchorterminal.com/compare/celesto-vs-sandbox0.md)\n- [Celesto (formerly SmolVM) vs Sprites](https://www.anchorterminal.com/compare/celesto-vs-sprites.md)\n- [Celesto (formerly SmolVM) vs Together Code Sandbox](https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.md)\n- [Celesto (formerly SmolVM) vs Vercel Sandbox](https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/agent37-vs-celesto.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)", "url": "" } ], "description": "Amazon Bedrock AgentCore Code Interpreter scores 71.4 (BB) to Celesto's 68 (B) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Amazon Bedrock AgentCore Code Interpreter BB 71.4", "Celesto (formerly SmolVM) B 68", "scores" ], "h1": "Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/agentcore-code-interpreter-vs-celesto", "published": "2026-10-01", "section": "tools", "title": "Amazon Bedrock AgentCore Code Interpreter vs Celesto (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto" }, "tokens": { "markdown": 5800, "slim": 3030 }, "version": 1 }