{ "data": { "a": { "slug": "agentcore-code-interpreter", "name": "Amazon Bedrock AgentCore Code Interpreter", "vendor": "Amazon Web Services", "vendorUrl": "https://aws.amazon.com/bedrock/agentcore/", "kind": "http-api", "category": "code-sandboxes", "summary": "Amazon Bedrock AgentCore Code Interpreter is AWS's managed sandbox for running agent-written Python, JavaScript and TypeScript. Each session is a dedicated microVM, reached through the AWS API, the AgentCore SDKs or an MCP server.", "url": "https://www.anchorterminal.com/tools/agentcore-code-interpreter", "markdownUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json", "repo": "https://github.com/aws/bedrock-agentcore-sdk-python", "license": "Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "packages": [ { "registry": "pypi", "name": "bedrock-agentcore" }, { "registry": "npm", "name": "bedrock-agentcore" }, { "registry": "pypi", "name": "boto3" }, { "registry": "pypi", "name": "awslabs.amazon-bedrock-agentcore-mcp-server" } ], "auth": "api-key", "authNotes": "AWS Signature Version 4 with IAM access keys or a role, self-serve once an AWS account exists. A policy must allow `bedrock-agentcore:StartCodeInterpreterSession`, `bedrock-agentcore:InvokeCodeInterpreter` and `bedrock-agentcore:StopCodeInterpreterSession` on the interpreter's ARN. The managed interpreter `aws.codeinterpreter.v1` needs no resource of its own. A custom interpreter takes a network mode and an execution role, which bounds the AWS resources code in the sandbox can reach. No partner or sales approval.", "pricing": "usage", "pricingNotes": "$0.0895 a vCPU-hour and $0.00945 a GB-hour, billed per second on CPU used and peak memory, with a one-second minimum and 128 MB minimum memory. AWS says I/O wait and idle time are free when no background process is running. Network data transfer is extra at EC2 rates. No allowance specific to Code Interpreter. New AWS accounts get up to $200 in Free Tier credits, and AWS says most new customers sign up without a payment method, so an agent's owner can start without a contract (https://aws.amazon.com/bedrock/agentcore/pricing/, https://aws.amazon.com/free/free-tier-faqs/, checked 2026-10-08).", "priceSummary": "$0.0895 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the Code Interpreter endpoints, in the API reference or on the pricing page. AgentCore Payments, a separate component, lets a customer's agents pay third parties over x402 and MPP and is not a way to pay AWS (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 776, "npmWeekly": 334717, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html", "llmsTxt": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs" ], "tags": [ "hosted", "usage-priced", "closed-source", "python", "typescript", "enterprise", "llms-txt", "mcp", "free-tier", "no-card", "status-page", "soc2" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 71.3, "grade": "BB", "agentReady": true, "rank": 137, "ranked": true, "rankOf": 1199, "categoryRank": 3, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 65, "payments": 30, "reliability": 85, "schema": 81, "security": 87, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -2, "negativeNotes": [ "2026-06-19. GHSA-6rfw-mq36-jm8h (CVE-2026-12530, high, CVSS 3.1 vector C:H/I:H), improper neutralisation of argument delimiters in the Python SDK's Code Interpreter `install_packages()`, so a crafted package name could run commands in the sandbox. Fixed in 1.6.1 and published, -1. https://osv.dev/vulnerability/GHSA-6rfw-mq36-jm8h", "2026-07-23. AWS bulletin 2026-065-AWS (CVE-2026-16796, GHSA-j6g5-3hh3-pgw8, high), the same class of flaw in `install_packages()` again, letting a remote authenticated user run arbitrary commands in the sandbox through crafted package names. Fixed in 1.18.1 and published with a workaround, -1. https://aws.amazon.com/security/security-bulletins/2026-065-aws/" ], "verdict": "Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.", "bestFor": "A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.", "strengths": [ "Each session runs in a dedicated microVM, which AWS says is terminated and has its memory sanitised when the session ends", "Billing is per second on CPU used and peak memory, at $0.0895 a vCPU-hour and $0.00945 a GB-hour, with I/O wait and idle time free", "IAM actions cover each of the nine operations, with separate ARNs for the system interpreter and custom ones", "Rate limits are published per API, 30 requests a second for `StartCodeInterpreterSession` and `InvokeCodeInterpreter`, and 1,000 concurrent sessions per account", "The managed interpreter `aws.codeinterpreter.v1` needs no resource set-up, and `code_session` in the Python SDK starts and stops a session in one block" ], "weaknesses": [ "No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC", "Every session is capped at 2 vCPU, 8 GB of memory and 10 GB of disk, and the cap is not adjustable", "`InvokeCodeInterpreter` takes one flat `arguments` object for nine operations, so the reference does not say which fields each operation requires", "The Bedrock SLA that AWS says applies to AgentCore dates from 4 October 2023 and names only the Bedrock APIs for models", "The SDK's `install_packages()` had two high-severity command-injection advisories in 2026, the second after the first fix" ], "agentNotes": [ "Start a session with `StartCodeInterpreterSession`, then pass its id in the `x-amzn-code-interpreter-session-id` header on every `InvokeCodeInterpreter` call", "Set `sessionTimeoutSeconds` when starting. The default is 900 seconds and the maximum is eight hours, and the session ends itself at the timeout", "Stop sessions when done. Billing runs per second while code is busy, and a session left open counts against the 1,000 concurrent-session quota", "Use `bedrock-agentcore` 1.18.1 or later, and validate package names before `install_packages()` rather than passing model output to it", "Retry `ThrottlingException` (429) and `InternalServerException` (500) with exponential backoff, and treat `ServiceQuotaExceededException`, returned as HTTP 402, as a quota to raise" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.3 } ], "editorialScores": { "ergonomics": 75, "maintenance": 65, "payments": 30, "reliability": 85, "schema": 81, "security": 87, "transparency": 51 }, "provenanceScore": 93, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "lastMoved": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install bedrock-agentcore # or: npm i bedrock-agentcore", "http": "awscurl -X POST \\\n \"https://bedrock-agentcore.us-west-2.amazonaws.com/code-interpreters/aws.codeinterpreter.v1/tools/invoke\" \\\n -H \"Content-Type: application/json\" \\\n -H \"x-amzn-code-interpreter-session-id: $SESSION_ID\" \\\n --service bedrock-agentcore --region us-west-2 \\\n -d '{\"name\":\"executeCode\",\"arguments\":{\"language\":\"python\",\"code\":\"print(\\\"Hello, world!\\\")\"}}'", "config": { "mcpServers": { "bedrock-agentcore-mcp-server": { "args": [ "awslabs.amazon-bedrock-agentcore-mcp-server@latest" ], "command": "uvx", "env": { "AGENTCORE_ENABLE_TOOLS": "code_interpreter", "FASTMCP_LOG_LEVEL": "ERROR" } } } } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/agentcore-code-interpreter" }, "sameCompany": [ "amazon-bedrock-customization", "amazon-textract", "aws-end-user-messaging", "amazon-sns", "amazon-s3", "amazon-eventbridge" ], "area": "agent-runtime", "unitPrices": [ { "item": "CPU", "unit": "vcpu-hour", "usd": 0.0895, "note": "Billed per second on CPU used. Memory extra at $0.00945 a GB-hour on peak use" }, { "item": "Session at the 2 vCPU, 8 GB cap, fully busy", "unit": "session-hour", "usd": 0.2546, "note": "Our sum of 2 x $0.0895 and 8 x $0.00945. I/O wait and idle time are not billed" } ], "provenance": { "legalEntity": "Amazon Web Services, Inc.", "domain": "amazonaws.com", "domainRegistered": "2005-08-18", "endpointOnVendorDomain": true, "terms": "https://aws.amazon.com/service-terms/", "privacy": "https://aws.amazon.com/privacy/", "statusPage": "https://health.aws.amazon.com/health/status", "changelog": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/release-notes.html", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The endpoints are `bedrock-agentcore.\u003cregion\u003e.amazonaws.com`. RDAP gives 2005-08-18 for amazonaws.com and 1994-11-01 for amazon.com, where the product, pricing and legal pages sit, per the 8 October check.", "The AWS Service Terms were last updated on 13 October 2026. Section 50 covers Amazon Bedrock, and 50.15 covers AgentCore Payments. No clause naming Code Interpreter was found.", "The AWS Privacy Notice, last updated 18 May 2026, names Amazon Web Services, Inc. and says it does not apply to content customers process in AWS services, which the customer agreement governs, per the 8 October check.", "aws.amazon.com/.well-known/security.txt has Contact, Policy and Encryption fields. Its Expires date of 2026-09-24 had passed on 8 October, and on 17 October it reads Expires 2027-10-16.", "AgentCore release notes carry a month for each entry, not a day." ], "score": 93 }, "requirements": { "card": "unknown", "freeTier": true, "minutes": 15, "credential": "cloud-iam", "hosting": [ "US", "EU", "UK", "CA", "APAC" ], "euResidency": "yes", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II", "ISO 27001", "ISO 27701", "HIPAA (BAA available)", "FedRAMP", "CSA STAR", "GDPR" ], "dpa": true, "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentcore-code-interpreter.json", "live": { "slug": "agentcore-code-interpreter", "probe": { "target": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "method": "get", "lastAt": "2026-10-22T11:16:17.97651373Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "invalid character \"{\" in host name", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 253, "samples30d": 3301, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 0 }, { "date": "2026-10-10", "probes": 247, "ok": 0 }, { "date": "2026-10-11", "probes": 247, "ok": 0 }, { "date": "2026-10-12", "probes": 247, "ok": 0 }, { "date": "2026-10-13", "probes": 248, "ok": 0 }, { "date": "2026-10-14", "probes": 249, "ok": 0 }, { "date": "2026-10-15", "probes": 253, "ok": 0 }, { "date": "2026-10-16", "probes": 252, "ok": 0 }, { "date": "2026-10-17", "probes": 253, "ok": 0 }, { "date": "2026-10-18", "probes": 256, "ok": 0 }, { "date": "2026-10-19", "probes": 255, "ok": 0 }, { "date": "2026-10-20", "probes": 252, "ok": 0 }, { "date": "2026-10-21", "probes": 253, "ok": 0 }, { "date": "2026-10-22", "probes": 120, "ok": 0 } ], "outages": [ { "start": "2026-10-09T07:40:18.24415355Z", "end": "0001-01-01T00:00:00Z", "note": "invalid character \"{\" in host name" } ] }, "vendorStatus": { "page": "https://health.aws.amazon.com/health/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-22T07:11:59.905496247Z" }, "versions": [ { "registry": "github", "name": "aws/bedrock-agentcore-sdk-python", "version": "v1.24.2", "released": "2026-10-19", "seenAt": "2026-10-22T07:10:28.82704882Z" }, { "registry": "npm", "name": "bedrock-agentcore", "version": "0.4.6", "seenAt": "2026-10-22T07:10:24.779877572Z" }, { "registry": "pypi", "name": "awslabs.amazon-bedrock-agentcore-mcp-server", "version": "0.2.1", "released": "2026-09-08", "seenAt": "2026-10-22T07:10:26.780298082Z" }, { "registry": "pypi", "name": "bedrock-agentcore", "version": "1.24.2", "released": "2026-10-19", "seenAt": "2026-10-22T07:10:24.662008725Z" }, { "registry": "pypi", "name": "boto3", "version": "1.43.117", "released": "2026-10-21", "seenAt": "2026-10-22T07:10:26.742609573Z" } ], "githubStars": 779, "npmWeekly": 132752, "pypiWeekly": 1575313, "securityTxt": { "url": "https://amazonaws.com/.well-known/security.txt", "state": "valid", "expires": "2027-10-16T16:25:03.000Z", "checkedAt": "2026-10-21T15:59:32.931529409Z" }, "llmsTxt": { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-21T14:32:41.24932613Z" }, "domain": { "domain": "amazonaws.com", "registered": "2005-08-18", "source": "https://rdap.verisign.com/com/v1/domain/amazonaws.com", "checkedAt": "2026-10-18T13:44:27.00808976Z" }, "pages": [ { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/release-notes.html", "kind": "changelog", "status": 304, "checkedAt": "2026-10-22T01:14:38.540606122Z", "changedAt": "2026-10-19T23:55:39.168612549Z", "fingerprint": "85e3a4dac068" }, { "url": "https://aws.amazon.com/bedrock/agentcore/pricing/", "kind": "pricing", "status": 304, "checkedAt": "2026-10-22T01:10:41.223312232Z", "changedAt": "2026-10-16T22:17:38.915190323Z", "fingerprint": "082114b4152f" }, { "url": "https://aws.amazon.com/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-22T01:10:53.223694496Z", "changedAt": "2026-10-16T22:17:50.910555964Z", "fingerprint": "fb7849205209" }, { "url": "https://aws.amazon.com/service-terms/", "kind": "terms", "status": 304, "checkedAt": "2026-10-22T01:10:59.225052773Z", "changedAt": "2026-10-13T20:10:51.260474372Z", "fingerprint": "a4e2f6171b20" } ], "github": { "repo": "aws/bedrock-agentcore-sdk-python", "checkedAt": "2026-10-19T05:55:22.637323842Z", "stars": 777, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-14T12:46:49Z", "openIssues": 82, "openPRs": 49, "issuesOpened90d": 27, "issuesClosed90d": 14, "prsMerged90d": 47, "ci": { "branch": "main", "runs": 50, "success": 49, "failure": 1, "other": 0, "latest": "success", "latestAt": "2026-10-14T12:47:23Z" }, "advisories": [ { "ghsa": "GHSA-j6g5-3hh3-pgw8", "cve": "CVE-2026-16796", "severity": "high", "published": "2026-07-23T20:11:08Z" }, { "ghsa": "GHSA-hqf8-7w95-9r33", "cve": "CVE-2026-15737", "severity": "medium", "published": "2026-07-16T17:05:36Z" }, { "ghsa": "GHSA-6rfw-mq36-jm8h", "cve": "CVE-2026-12530", "severity": "high", "published": "2026-06-17T21:10:20Z" } ], "replies": { "sampled": 25, "unanswered": 14, "medianDays": 4 } }, "updatedAt": "2026-10-22T11:16:17.97651373Z" } }, "answer": "Amazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 5 of 7 scored categories. Sandbox0 leads on payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "sandbox0", "name": "Sandbox0", "vendor": "Lougao, LLC (Sandbox0)", "vendorUrl": "https://sandbox0.ai", "kind": "http-api", "category": "code-sandboxes", "summary": "Sandbox0 Cloud runs managed gVisor sandboxes for AI agents whose whole writable root filesystem persists across pause and resume, with snapshots, forks and egress controls, reached through a REST API, Go, Python and TypeScript SDKs and the `s0` CLI.", "url": "https://www.anchorterminal.com/tools/sandbox0", "markdownUrl": "https://www.anchorterminal.com/tools/sandbox0.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sandbox0.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sandbox0.json", "repo": "https://github.com/sandbox0-ai/sdk-js", "license": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "transports": [ "http" ], "remoteUrl": "https://api.sandbox0.ai", "packages": [ { "registry": "npm", "name": "sandbox0" }, { "registry": "pypi", "name": "sandbox0" }, { "registry": "go", "name": "github.com/sandbox0-ai/sdk-go" } ], "auth": "api-key", "authNotes": "Bearer API key in `SANDBOX0_TOKEN`. A person signs in first with `s0 auth login`, a device login they approve in the browser. Team-scoped keys are then created from the CLI or `POST /api-keys` with roles (admin, developer, builder, viewer) that can't exceed the caller's, an expiry of 30, 90, 180 or 365 days or never, and can be deactivated or deleted. `GET /api-keys/current` returns a key's identity and permissions. Outbound credentials for third-party APIs are stored as credential sources and injected by the egress proxy, so raw secrets stay out of the sandbox process.", "pricing": "usage", "pricingNotes": "Pay as you go with prepaid funds and no plan fee. Compute is $0.015 per GiB-hour of the configured memory limit (about $0.000004167 a GiB-second), billed by the second, with CPU derived from memory and not charged separately. Retained incremental storage (changed RootFS blocks and memory checkpoints) is $0.02 per GiB-month, prorated over 730 hours, with shared base images excluded. Ingress, egress and object-store requests are $0.00, egress \"for now\". New users get a one-time $5 credit with no card. Paused sandboxes are charged for storage only. Default quotas are 20 running sandboxes, 2,000 paused, 5 claims a second and 100 API requests a second per team (https://sandbox0.ai/pricing).", "priceSummary": "$0.015 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, pricing page or the OpenAPI file in the SDK repositories. Funds are prepaid through the dashboard (checked 2026-10-21).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 88, "npmWeekly": 268, "pypiWeekly": 82, "asOf": "2026-10-21" }, "docsUrl": "https://sandbox0.ai/docs/sandbox", "llmsTxt": "https://sandbox0.ai/llms.txt", "openapi": "https://github.com/sandbox0-ai/sdk-go/blob/main/openapi.yaml", "capabilities": [ "sandbox.code", "sandbox.persist", "sandbox.fs", "sandbox.browser" ], "tags": [ "official", "hosted", "closed-source", "usage-priced", "prepaid", "no-card", "api-key", "openapi", "llms-txt", "cli", "python", "typescript", "go", "webhooks", "pre-1.0", "new" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 55.1, "grade": "C", "agentReady": false, "rank": 764, "ranked": true, "rankOf": 1199, "categoryRank": 15, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-21" }, "negative": -3, "negativeNotes": [ "2026-10-16, -3. Self-hosting was discontinued the day it was announced. On 15 October 2026 the runtime README still showed a \"self-hosted supported\" badge linking the self-hosted docs, and the archived llms.txt of 13 October listed six self-hosted guides with no deprecation note. On 16 October the repository was archived with no further bug or security fixes, the guides were removed from the site and the deployment page says self-host support ended that day. No blog post or earlier notice was found. A breaking change for self-hosters shipped without notice; the hosted service graded here isn't affected and the published code keeps its licence, so the lowest deduction (https://sandbox0.ai/docs/sandbox/deployment, https://github.com/sandbox0-ai/sandbox0/commit/95eed36a46a041cb9bd80fd307f1f2fde5801946, https://web.archive.org/web/20261013194906/https://sandbox0.ai/llms.txt)." ], "verdict": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.", "bestFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "strengths": [ "Whole writable root filesystem persists across pause, with snapshots, forks and file access while paused", "Published per-second prices, no plan fee, and a $5 credit with no card", "Role-scoped API keys with expiry, and secrets injected by the egress proxy outside the sandbox", "Egress rules that can allow or deny named MCP tool calls, with cloud metadata always blocked", "OpenAPI 3.0 file of 145 operations, llms.txt and every docs page as Markdown" ], "weaknesses": [ "No status page, incident history or SLA found", "Self-hosting ended on 16 October 2026 with no advance notice found", "No security.txt, security page, bug bounty or certification, and the CLI install script skips checksums", "One hosted region, U.S. East, intended for U.S. customers", "Memory checkpoints and live migration are experimental by the vendor's word" ], "agentNotes": [ "Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.", "Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.", "Back off on 429 `quota_exceeded` and honour Retry-After on claims.", "Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.", "Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.1 } ], "editorialScores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 41 }, "provenanceScore": 55, "checked": { "categories": { "ergonomics": "2026-10-21", "maintenance": "2026-10-21", "payments": "2026-10-21", "reliability": "2026-10-21", "schema": "2026-10-21", "security": "2026-10-21", "transparency": "2026-10-21" }, "last": "2026-10-21", "oldest": "2026-10-21", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install sandbox0 # or npm install sandbox0, or go get github.com/sandbox0-ai/sdk-go", "http": "curl -X POST https://api.sandbox0.ai/api/v1/sandboxes -H \"Authorization: Bearer $SANDBOX0_TOKEN\" -H \"Content-Type: application/json\" -d '{\"template\":\"default\",\"config\":{\"ttl\":300,\"hard_ttl\":3600}}'" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/sandbox0" }, "area": "agent-runtime", "unitPrices": [ { "item": "Compute, per GiB-hour of configured memory", "unit": "compute-unit", "usd": 0.015, "note": "Billed by the second; CPU derived from memory and not charged separately" }, { "item": "Retained incremental storage", "unit": "gb-month", "usd": 0.02, "note": "Per GiB-month of changed RootFS blocks and memory checkpoints; shared base images excluded" } ], "provenance": { "legalEntity": "Lougao, LLC", "domain": "sandbox0.ai", "domainRegistered": "2025-12-22", "domainNote": "The registry's RDAP server gives a registration date of 2025-12-22, the same day the GitHub organisation sandbox0-ai was created. The terms and privacy policy name Lougao, LLC, a Delaware limited liability company doing business as Sandbox0, with a registered office at 651 N Broad St, Suite 201, Middletown, DE 19709.", "endpointOnVendorDomain": true, "terms": "https://sandbox0.ai/terms", "privacy": "https://sandbox0.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-21", "notes": [ "The terms of service (effective 17 June 2026) are between the user and Lougao, LLC under Delaware law and courts. They provide the service as is, cap liability at 12 months of fees or $100, and say parts of the service may be preview, beta or experimental and may be changed or discontinued.", "sandbox0.ai/.well-known/security.txt, /security, /status and /changelog answer 404, and status.sandbox0.ai doesn't resolve. The archived runtime's SUPPORT.md sends security reports to contact@sandbox0.ai.", "robots.txt on sandbox0.ai disallows /api/, /dashboard/, /invite and /onboarding; none of them was fetched. api.sandbox0.ai answers 404 at its root." ], "score": 55 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sandbox0.json", "live": { "slug": "sandbox0", "probe": { "target": "https://api.sandbox0.ai", "method": "get", "lastAt": "2026-10-22T11:16:46.516239968Z", "lastOk": true, "lastStatus": 404, "lastMs": 170, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 177, "p95ms24h": 260, "samples24h": 46, "samples30d": 46, "days": [ { "date": "2026-10-22", "probes": 46, "ok": 46 } ] }, "versions": [ { "registry": "github", "name": "sandbox0-ai/sdk-js", "version": "v0.10.5", "released": "2026-10-21", "seenAt": "2026-10-22T08:14:07.513243287Z" }, { "registry": "npm", "name": "sandbox0", "version": "0.10.5", "seenAt": "2026-10-22T08:14:03.65438415Z" }, { "registry": "pypi", "name": "sandbox0", "version": "0.10.4", "released": "2026-10-08", "seenAt": "2026-10-22T08:14:07.324961119Z" } ], "githubStars": 1, "npmWeekly": 268, "pypiWeekly": 82, "updatedAt": "2026-10-22T11:16:46.516239968Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Amazon Web Services", "b": "Lougao, LLC (Sandbox0)", "name": "Vendor" }, { "a": "https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke", "b": "https://api.sandbox0.ai", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "API key", "name": "Auth" }, { "a": "Pay per use", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0", "b": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-10-21", "name": "Last release" }, { "a": "2026-10-01", "b": "", "name": "Terms last updated" }, { "a": "2026-05-18", "b": "", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "776 stars, 335k npm/wk", "b": "88 stars, 268 npm/wk, 82 PyPI/wk", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Amazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 5 of 7 scored categories. Sandbox0 leads on payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Amazon Bedrock AgentCore Code Interpreter or Sandbox0?" }, { "answer": "Both need an API key.", "question": "Do Amazon Bedrock AgentCore Code Interpreter and Sandbox0 need an API key?" }, { "answer": "Yes. Amazon Bedrock AgentCore Code Interpreter has a hosted endpoint at https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke and Sandbox0 at https://api.sandbox0.ai.", "question": "Can an agent call Amazon Bedrock AgentCore Code Interpreter and Sandbox0 without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 85 against 38", "Security \u0026 auth, 87 against 58", "Transparency \u0026 trust, 72 against 48" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.", "slug": "agentcore-code-interpreter", "watchFor": "No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC" }, { "aheadOn": [ "Payments \u0026 pricing, 40 against 30", "Maintenance \u0026 community, 76 against 65" ], "also": null, "goodFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "slug": "sandbox0", "watchFor": "No status page, incident history or SLA found" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter.json", "title": "Agent 37 Cloud vs Amazon Bedrock AgentCore Code Interpreter", "url": "https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Blaxel Sandboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Daytona", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs E2B", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Freestyle", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Maritime", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Offscreen", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs SPACE", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sprites", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.json", "title": "Blaxel Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.json", "title": "Cloudflare Sandbox SDK vs Sandbox0", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0.json", "title": "Daytona vs Sandbox0", "url": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.json", "title": "Deno Sandbox vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0.json", "title": "E2B vs Sandbox0", "url": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.json", "title": "Freestyle vs Sandbox0", "url": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0.json", "title": "Maritime vs Sandbox0", "url": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.json", "title": "Microsoft Execution Containers vs Sandbox0", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.json", "title": "Modal Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.json", "title": "Morph Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.json", "title": "Offscreen vs Sandbox0", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.json", "title": "SPACE vs Sandbox0", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0.json", "title": "Runloop Devboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites.json", "title": "Sandbox0 vs Sprites", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.json", "title": "Sandbox0 vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.json", "title": "Sandbox0 vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0.json", "title": "Agent 37 Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.json", "title": "DeltaBox Lite vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0" } ], "scores": [ { "agentcore-code-interpreter": 85, "by": 47, "edge": "agentcore-code-interpreter", "key": "reliability", "name": "Reliability", "sandbox0": 38, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agentcore-code-interpreter": 81, "by": 4, "edge": "agentcore-code-interpreter", "key": "schema", "name": "Schema \u0026 documentation", "sandbox0": 77, "weight": 13 }, { "agentcore-code-interpreter": 75, "by": 1, "edge": "agentcore-code-interpreter", "key": "ergonomics", "name": "Agent ergonomics", "sandbox0": 74, "weight": 13 }, { "agentcore-code-interpreter": 87, "by": 29, "edge": "agentcore-code-interpreter", "key": "security", "name": "Security \u0026 auth", "sandbox0": 58, "weight": 14 }, { "agentcore-code-interpreter": 30, "by": 10, "edge": "sandbox0", "key": "payments", "name": "Payments \u0026 pricing", "sandbox0": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agentcore-code-interpreter": 65, "by": 11, "edge": "sandbox0", "key": "maintenance", "name": "Maintenance \u0026 community", "sandbox0": 76, "weight": 7 }, { "agentcore-code-interpreter": 72, "by": 24, "edge": "agentcore-code-interpreter", "key": "transparency", "name": "Transparency \u0026 trust", "sandbox0": 48, "weight": 7 } ], "summary": "Amazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 5 of 7 scored categories. Sandbox0 leads on payments \u0026 pricing and maintenance \u0026 community. Both do code sandboxes.", "tutorials": [], "verdicts": { "agentcore-code-interpreter": "Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.", "sandbox0": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0", "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.min.md" }, "markdown": "Amazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 5 of 7 scored categories. Sandbox0 leads on payments \u0026 pricing and maintenance \u0026 community. Both do code sandboxes.\n\n- Amazon Bedrock AgentCore Code Interpreter: grade BB, 71.3/100, rank #137 of 1199. Markdown https://www.anchorterminal.com/tools/agentcore-code-interpreter.md · JSON https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json\n- Sandbox0: grade C, 55.1/100, rank #764 of 1199. Markdown https://www.anchorterminal.com/tools/sandbox0.md · JSON https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 190 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Amazon Bedrock AgentCore Code Interpreter (BB)\n\nGood for: A team already on AWS that wants agent code to run under IAM, inside a VPC and beside S3 data, for sessions up to eight hours.\n\nAhead on:\n- Reliability, 85 against 38\n- Security \u0026 auth, 87 against 58\n- Transparency \u0026 trust, 72 against 48\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC\n\n### Sandbox0 (C)\n\nGood for: Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.\n\nAhead on:\n- Payments \u0026 pricing, 40 against 30\n- Maintenance \u0026 community, 76 against 65\n\nWatch for: No status page, incident history or SLA found\n\n\n## Score by category\n\n| Category | Weight | Amazon Bedrock AgentCore Code Interpreter | Sandbox0 | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 85 | 38 | Amazon Bedrock AgentCore Code Interpreter +47 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 77 | Amazon Bedrock AgentCore Code Interpreter +4 |\n| Agent ergonomics | 13% (16.2 this run) | 75 | 74 | Amazon Bedrock AgentCore Code Interpreter +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 87 | 58 | Amazon Bedrock AgentCore Code Interpreter +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 40 | Sandbox0 +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 65 | 76 | Sandbox0 +11 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 48 | Amazon Bedrock AgentCore Code Interpreter +24 |\n| Negative events | ≤15 | -2 | -3 | |\n| **Total** | | **71.3 · BB** | **55.1 · C** | |\n\n## Facts side by side\n\n| Fact | Amazon Bedrock AgentCore Code Interpreter | Sandbox0 |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Amazon Web Services | Lougao, LLC (Sandbox0) |\n| Hosted endpoint | `https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke` | `https://api.sandbox0.ai` |\n| Transports | HTTP | HTTP |\n| Auth | API key | API key |\n| Pricing | Pay per use | Pay per use |\n| x402 | no | no |\n| Licence | Proprietary service under the AWS Service Terms. The AgentCore SDKs for Python and TypeScript and the AgentCore MCP server are Apache-2.0 | Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-07 | 2026-10-21 |\n| Terms last updated | 2026-10-01 | |\n| Privacy policy last updated | 2026-05-18 | |\n| Customer content may train models | yes, with an opt-out | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 776 stars, 335k npm/wk | 88 stars, 268 npm/wk, 82 PyPI/wk |\n| Agent reviews | 3.3/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Amazon Bedrock AgentCore Code Interpreter.** Each session runs in its own microVM with 2 vCPU, 8 GB and a 10 GB disk for up to eight hours, and IAM can scope access to one interpreter. Sessions cannot be paused or resumed, and an AWS account with IAM set-up is needed before a first call.\n\n**Sandbox0.** A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.\n\n## Before you call either\n\n### Amazon Bedrock AgentCore Code Interpreter\n\n1. Start a session with `StartCodeInterpreterSession`, then pass its id in the `x-amzn-code-interpreter-session-id` header on every `InvokeCodeInterpreter` call\n2. Set `sessionTimeoutSeconds` when starting. The default is 900 seconds and the maximum is eight hours, and the session ends itself at the timeout\n3. Stop sessions when done. Billing runs per second while code is busy, and a session left open counts against the 1,000 concurrent-session quota\n4. Use `bedrock-agentcore` 1.18.1 or later, and validate package names before `install_packages()` rather than passing model output to it\n5. Retry `ThrottlingException` (429) and `InternalServerException` (500) with exponential backoff, and treat `ServiceQuotaExceededException`, returned as HTTP 402, as a quota to raise\n\n### Sandbox0\n\n1. Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.\n2. Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.\n3. Back off on 429 `quota_exceeded` and honour Retry-After on claims.\n4. Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.\n5. Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login.\n\n## Questions\n\n### Which is better for AI agents, Amazon Bedrock AgentCore Code Interpreter or Sandbox0?\n\nAmazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 5 of 7 scored categories. Sandbox0 leads on payments \u0026 pricing and maintenance \u0026 community.\n\n### Do Amazon Bedrock AgentCore Code Interpreter and Sandbox0 need an API key?\n\nBoth need an API key.\n\n### Can an agent call Amazon Bedrock AgentCore Code Interpreter and Sandbox0 without installing anything?\n\nYes. Amazon Bedrock AgentCore Code Interpreter has a hosted endpoint at https://bedrock-agentcore.{region}.amazonaws.com/code-interpreters/{id}/tools/invoke and Sandbox0 at https://api.sandbox0.ai.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentcore-code-interpreter\", \"b\": \"sandbox0\"}`. From a terminal: `anchor compare agentcore-code-interpreter sandbox0`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentcore-code-interpreter.json and https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n\n## Other comparisons with Amazon Bedrock AgentCore Code Interpreter or Sandbox0\n\n- [Agent 37 Cloud vs Amazon Bedrock AgentCore Code Interpreter](https://www.anchorterminal.com/compare/agent37-vs-agentcore-code-interpreter.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Blaxel Sandboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-blaxel-sandboxes.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Daytona](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-daytona.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs E2B](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Freestyle](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Maritime](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Modal Sandboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-modal-sandboxes.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Morph Cloud](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-morph-cloud.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Offscreen](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs SPACE](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Runloop Devboxes](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-runloop.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sprites](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sprites.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Together Code Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-together-code-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.md)\n- [Blaxel Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.md)\n- [Cloudflare Sandbox SDK vs Sandbox0](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.md)\n- [Daytona vs Sandbox0](https://www.anchorterminal.com/compare/daytona-vs-sandbox0.md)\n- [Deno Sandbox vs Sandbox0](https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.md)\n- [E2B vs Sandbox0](https://www.anchorterminal.com/compare/e2b-vs-sandbox0.md)\n- [Freestyle vs Sandbox0](https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.md)\n- [Maritime vs Sandbox0](https://www.anchorterminal.com/compare/maritime-vs-sandbox0.md)\n- [Microsoft Execution Containers vs Sandbox0](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.md)\n- [Modal Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.md)\n- [Morph Cloud vs Sandbox0](https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.md)\n- [Offscreen vs Sandbox0](https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.md)\n- [SPACE vs Sandbox0](https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.md)\n- [Runloop Devboxes vs Sandbox0](https://www.anchorterminal.com/compare/runloop-vs-sandbox0.md)\n- [Sandbox0 vs Sprites](https://www.anchorterminal.com/compare/sandbox0-vs-sprites.md)\n- [Sandbox0 vs Together Code Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.md)\n- [Sandbox0 vs Vercel Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Sandbox0](https://www.anchorterminal.com/compare/agent37-vs-sandbox0.md)\n- [DeltaBox Lite vs Sandbox0](https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-22", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "url": "" } ], "description": "Amazon Bedrock AgentCore Code Interpreter scores 71.3 (BB) to Sandbox0's 55.1 (C) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Amazon Bedrock AgentCore Code Interpreter BB 71.3", "Sandbox0 C 55.1", "scores" ], "h1": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "image": "https://www.anchorterminal.com/assets/og/compare-agentcore-code-interpreter-vs-sandbox0.png", "path": "/compare/agentcore-code-interpreter-vs-sandbox0", "published": "2026-10-01", "section": "tools", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0 (2026)", "toc": null, "updated": "2026-10-22", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0" }, "tokens": { "markdown": 3200, "slim": 780 }, "version": 1 }