{ "data": { "a": { "slug": "celesto", "name": "Celesto (formerly SmolVM)", "vendor": "Celesto AI, Inc.", "vendorUrl": "https://celesto.ai", "kind": "sdk", "category": "code-sandboxes", "summary": "Celesto, formerly SmolVM, is an open-source Python SDK and CLI from Celesto AI that runs disposable Firecracker or QEMU microVMs on the owner's machine for agent code, browsers and desktops, with an optional paid Celesto Cloud.", "url": "https://www.anchorterminal.com/tools/celesto", "markdownUrl": "https://www.anchorterminal.com/tools/celesto.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/celesto.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/celesto.json", "dns": "celesto.grade.anchorterminal.com", "repo": "https://github.com/CelestoAI/Celesto", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "celesto" } ], "auth": "none", "authNotes": "Local use needs no account or key. The local API server and dashboard each require a bearer token, generated at start or read from CELESTO_SERVER_TOKEN and CELESTO_DASHBOARD_TOKEN. Celesto Cloud uses an organisation-bound CELESTO_API_KEY with named permissions (see, execute, delete) set in the dashboard.", "pricing": "freemium", "pricingNotes": "The local SDK and CLI are free under Apache-2.0. Celesto Cloud bills sandboxes by the running hour from $0.015 (Micro, 1 vCPU, 2 GB) to $0.16 (XL, 8 vCPU, 32 GB), prepaid from $2.01, with a one-time $5 Micro credit and no card.", "priceSummary": "$0.015 / session-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs, llms.txt or the pricing page (checked 2026-11-06). Cloud runtime is prepaid by card under Settings \u003e Billing.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1149, "npmWeekly": null, "pypiWeekly": 699, "asOf": "2026-11-06" }, "docsUrl": "https://celesto.ai/docs", "llmsTxt": "https://celesto.ai/llms.txt", "openapi": "https://github.com/CelestoAI/Celesto/blob/main/ts/celesto-local-server.openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "no-card", "free-tier", "apache-2.0", "python", "typescript", "cli", "microvm", "firecracker", "llms-txt", "openapi", "telemetry", "pre-1.0", "renamed" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 298, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "bestFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "strengths": [ "Apache-2.0, installs from PyPI with `celesto setup` and `celesto doctor`, and runs local microVMs with no account or key", "Every `--json` response has the same `ok`, `command`, `exit_code`, `data` and `error` fields, with recovery commands in errors", "Network modes `off`, `public` (proxy that rejects private and metadata addresses) and `restricted` with CIDR or domain allowlists", "Dated changelog with Security sections, breaking changes marked, and 22 PyPI releases in the 90 days to 6 November 2026", "OpenAPI documents for the local server (24 operations) and the cloud API (171 operations) in the repository, plus llms.txt" ], "weaknesses": [ "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball", "Outbound network access is open by default, and Linux TAP mode does not block every private network or metadata service", "Usage telemetry to PostHog is on after a first-use notice, until switched off", "Renamed from SmolVM on 19 September 2026 in a breaking release that removed the `smolvm` command and import path", "No security.txt, bug bounty or certification found, and CI results could not be read" ], "agentNotes": [ "Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text", "Create computers with unique names and delete them by exact name when the job ends, including after failures", "Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open", "Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine", "Never paste browser or display connection URLs into model context; possession of the URL grants control" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 74 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install celesto \u0026\u0026 celesto setup \u0026\u0026 celesto doctor", "headless": { "create": "celesto computer create --name agent-job --json", "delete": "celesto computer delete agent-job --json", "exec": "celesto computer exec agent-job --json -- python -m pytest" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/celesto" }, "area": "agent-runtime", "unitPrices": [ { "item": "Cloud Micro sandbox (1 vCPU, 2 GB)", "unit": "session-hour", "usd": 0.015, "note": "Billed by the running hour; local use is free" }, { "item": "Cloud XL sandbox (8 vCPU, 32 GB)", "unit": "session-hour", "usd": 0.16, "note": "Largest size on the pricing page" } ], "provenance": { "legalEntity": "Celesto AI, Inc.", "domain": "celesto.ai", "domainRegistered": "2025-07-13", "endpointOnVendorDomain": null, "terms": "https://celesto.ai/legal/terms", "privacy": "https://celesto.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The privacy policy, last updated 30 October 2026, names Celesto AI, Inc., a Delaware corporation with a Wilmington mailing address. It has no clause on automated access.", "celesto.ai/robots.txt allows all crawlers. docs.celesto.ai carries Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives celesto.ai a registration date of 13 July 2025.", "/.well-known/security.txt returns 404. SECURITY.md asks for private reports through GitHub's vulnerability reporting. No status page is linked from the pricing page." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/celesto.json", "live": { "slug": "celesto", "versions": [ { "registry": "github", "name": "CelestoAI/Celesto", "version": "v0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.416837168Z" }, { "registry": "pypi", "name": "celesto", "version": "0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.309276304Z" } ], "githubStars": 1149, "pypiWeekly": 699, "securityTxt": { "url": "https://celesto.ai/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-07T16:01:01.176888246Z" }, "llmsTxt": { "url": "https://celesto.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:46.784166983Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/CelestoAI/Celesto/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:00.719411253Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8ddae4a6adbd" }, { "url": "https://celesto.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:00:50.868104256Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87ce310b1db6" }, { "url": "https://celesto.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:00:53.107282947Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1dece6f9a42e" } ], "updatedAt": "2026-11-07T16:01:01.176888246Z" } }, "answer": "E2B scores 70.1 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 5 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing.", "b": { "slug": "e2b", "name": "E2B", "vendor": "E2B", "vendorUrl": "https://e2b.dev", "kind": "http-api", "category": "code-sandboxes", "summary": "Firecracker microVM sandboxes for agent code, driven from Python and JavaScript SDKs, a CLI or a REST API.", "url": "https://www.anchorterminal.com/tools/e2b", "markdownUrl": "https://www.anchorterminal.com/tools/e2b.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/e2b.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/e2b.json", "dns": "e2b.grade.anchorterminal.com", "repo": "https://github.com/e2b-dev/E2B", "license": "Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://api.e2b.app", "packages": [ { "registry": "npm", "name": "e2b" }, { "registry": "pypi", "name": "e2b" }, { "registry": "npm", "name": "@e2b/code-interpreter" }, { "registry": "pypi", "name": "e2b-code-interpreter" } ], "auth": "api-key", "authNotes": "API key in the `X-API-Key` header on api.e2b.app. The SDKs and CLI read `E2B_API_KEY`. SDKs from 2.46.0 leave key validation to the server. `E2B_ACCESS_TOKEN` was switched off on 1 August 2026. Code inside a sandbox can get short-lived workload identity tokens instead of long-lived secrets, and stored secrets can be filled into outbound HTTPS headers by the egress proxy without entering the sandbox.", "pricing": "freemium", "pricingNotes": "Hobby is free with a one-time $100 usage credit and no card, sandboxes up to 1 hour and 20 running at once. Pro is $150 a month plus usage, sandboxes up to 24 hours and 100 concurrent (up to 1,100 with add-ons). Enterprise starts at $3,000 a month and adds BYOC. Compute is billed per second while a sandbox runs, $0.000014 a vCPU-second and $0.0000045 a GiB-second of RAM, so the default 2 vCPU, 4 GiB sandbox costs $0.1656 an hour. 10 GiB of storage free on Hobby, 20 GiB on Pro (https://e2b.dev/pricing). Paused sandboxes aren't billed, and when the credit runs out the account is blocked until a card is added (https://docs.e2b.dev/billing.md).", "priceSummary": "$0.0504 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 13400, "npmWeekly": 2217920, "pypiWeekly": 1408079, "asOf": "2026-09-30" }, "docsUrl": "https://docs.e2b.dev", "llmsTxt": "https://docs.e2b.dev/llms.txt", "openapi": "https://docs.e2b.dev/openapi-public.yaml", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "open-source", "self-hosted", "llms-txt", "python", "typescript", "enterprise" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 70.1, "grade": "BB", "agentReady": true, "rank": 214, "ranked": true, "rankOf": 1486, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 93, "payments": 50, "reliability": 77, "schema": 92, "security": 62, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -3, "negativeNotes": [ "2026-10-06 to 2026-10-28, -3. Minor releases of the listing's own `e2b` packages shipped changes the changelog marks breaking, with no earlier notice. 2.53.0 (6 October 2026, republished as 2.53.1) made `commands.run`, `pty.create` and `files.watchDir` throw `SandboxNotRunningError` instead of `SandboxNotFoundError` in JavaScript, 2.56.0 (13 October) removed the SDK in-flight caps and their environment variables, and 2.62.0 (28 October) stopped buffering stream uploads and rejects `gzip` with `useOctetStream: false`. The 12 October changelog also says the deprecated `POST /sandboxes` now always enables secured access, so envd answers 401 without the token, announced the week it shipped. One term for repeated breaks. https://github.com/e2b-dev/E2B/blob/main/packages/js-sdk/CHANGELOG.md and https://docs.e2b.dev/changelog.md" ], "verdict": "Each sandbox is a Firecracker microVM with its own kernel, priced per second with a $100 credit and no card. Incidents in the 90 days to November 2026 were all partial. Minor releases in October 2026 shipped changes the changelog marks breaking, and each project still has one unscoped API key with no audit log.", "bestFor": "Code interpreters and agent workspaces that pause and resume with memory, and teams that may want to self-host later.", "strengths": [ "Firecracker microVM with its own kernel per sandbox", "Egress allow and deny lists by domain, IP or CIDR, and secrets filled in outside the sandbox", "Apache-2.0 infrastructure in e2b-dev/runtime, self-hostable", "Public OpenAPI 3.1, llms.txt and a weekly dated changelog", "Per-second billing at published rates and a $100 credit without a card" ], "weaknesses": [ "Minor SDK releases 2.53.0, 2.56.0 and 2.62.0 (October 2026) shipped changes marked breaking, with no earlier notice", "One unscoped API key per project, with no audit log found", "Hobby sandboxes stop after 1 hour of continuous running", "Pro costs $150 a month before any compute", "No security.txt or bug bounty, and no published subprocessor list" ], "agentNotes": [ "Set a timeout when you create a sandbox. The default is 5 minutes", "Pause rather than kill when you'll come back. Resume takes about a second and nothing is billed while paused", "Use `Secret.fill` in network transforms instead of passing API keys into the sandbox environment", "Pin the SDK minor version and read the changelog before upgrading; catch `SandboxNotRunningError` (a `TimeoutError`) for a gone sandbox in JavaScript", "Check the `Should-Retry` header when a create fails, and pace creation at 1 a second on Hobby" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.1 } ], "editorialScores": { "ergonomics": 70, "maintenance": 93, "payments": 50, "reliability": 77, "schema": 92, "security": 62, "transparency": 75 }, "provenanceScore": 64, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install e2b-code-interpreter # or npm i @e2b/code-interpreter", "http": "curl https://api.e2b.app/v2/sandboxes -H \"X-API-Key: $E2B_API_KEY\"" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/e2b" }, "area": "agent-runtime", "unitPrices": [ { "item": "vCPU", "unit": "vcpu-hour", "usd": 0.0504, "note": "$0.000014 a vCPU-second, RAM extra at $0.0000045 a GiB-second" }, { "item": "Default sandbox (2 vCPU, 4 GiB)", "unit": "session-hour", "usd": 0.1656, "note": "Billed per second while running" }, { "item": "Pro plan", "unit": "month", "usd": 150, "note": "Usage billed on top" }, { "item": "Enterprise minimum", "unit": "month", "usd": 3000 } ], "provenance": { "legalEntity": "FoundryLabs, Inc.", "domain": "e2b.dev", "domainRegistered": "2023-04-03", "endpointOnVendorDomain": false, "terms": "https://e2b.dev/terms", "privacy": "https://e2b.dev/privacy", "statusPage": "https://status.e2b.dev", "changelog": "https://docs.e2b.dev/changelog", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "Terms (updated 4 December 2024) and privacy policy (8 April 2024) name FoundryLabs, Inc., a Delaware corporation, with arbitration in San Francisco.", "The API runs on api.e2b.app, a separate registrable domain from e2b.dev.", "e2b.dev/.well-known/security.txt returns 404." ], "score": 64 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/e2b.json", "live": { "slug": "e2b", "probe": { "target": "https://api.e2b.app", "method": "get", "lastAt": "2026-11-07T18:20:22.068326734Z", "lastOk": true, "lastStatus": 404, "lastMs": 1373, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 236, "p95ms24h": 696, "samples24h": 239, "samples30d": 7910, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.e2b.dev", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:04.08568677Z" }, "versions": [ { "registry": "github", "name": "e2b-dev/E2B", "version": "@e2b/python-sdk@2.63.0", "released": "2026-11-04", "seenAt": "2026-11-06T23:23:09.190655388Z" }, { "registry": "npm", "name": "@e2b/code-interpreter", "version": "2.9.1", "seenAt": "2026-11-06T23:23:07.401212836Z" }, { "registry": "npm", "name": "e2b", "version": "2.63.0", "seenAt": "2026-11-06T23:23:06.876259169Z" }, { "registry": "pypi", "name": "e2b", "version": "2.63.0", "released": "2026-11-04", "seenAt": "2026-11-06T23:23:07.098919487Z" }, { "registry": "pypi", "name": "e2b-code-interpreter", "version": "2.11.9", "released": "2026-11-04", "seenAt": "2026-11-06T23:23:09.089934023Z" } ], "githubStars": 14751, "npmWeekly": 2994535, "pypiWeekly": 2184759, "securityTxt": { "url": "https://e2b.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:46.394602378Z" }, "llmsTxt": { "url": "https://docs.e2b.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:19.978638892Z" }, "domain": { "domain": "e2b.dev", "registered": "2023-04-03", "source": "https://pubapi.registry.google/rdap/domain/e2b.dev", "checkedAt": "2026-11-01T14:24:12.056888225Z" }, "pages": [ { "url": "https://docs.e2b.dev/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:06:13.828726548Z", "changedAt": "2026-11-03T07:47:18.846569735Z", "fingerprint": "7c4d4f1211b1" }, { "url": "https://e2b.dev/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:09:07.278535652Z", "changedAt": "2026-11-07T14:09:07.278535652Z", "fingerprint": "27d39874a5c6" }, { "url": "https://e2b.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:09:09.549567499Z", "changedAt": "2026-11-07T14:09:09.549567499Z", "fingerprint": "77272c9d8a4b" }, { "url": "https://e2b.dev/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:09:11.60542895Z", "changedAt": "2026-11-07T14:09:11.60542895Z", "fingerprint": "f959d02813f2" } ], "github": { "repo": "e2b-dev/e2b", "checkedAt": "2026-11-02T08:45:34.274523357Z", "stars": 14666, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T07:10:58Z", "openIssues": 43, "openPRs": 78, "issuesOpened90d": 48, "issuesClosed90d": 31, "prsMerged90d": 198, "ci": { "branch": "main", "runs": 50, "success": 47, "failure": 3, "other": 0, "latest": "success", "latestAt": "2026-10-26T16:03:25Z" }, "replies": { "sampled": 25, "unanswered": 15, "medianDays": 3.7 } }, "updatedAt": "2026-11-07T18:20:22.068326734Z" } }, "edges": [ { "by": 12, "category": "maintenance", "leads": "e2b", "name": "Maintenance \u0026 community", "reasons": { "a": "0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81.", "b": "e2b 2.62.0 tagged on 28 October 2026 in both SDKs (30). 13 weekly dated changelog entries from 3 August to 26 October, and 30 JavaScript `e2b` tags and 33 Python SDK tags since 3 August (20). Per the 1 October check, 25 open issues against 12,900 stars; GitHub's issue pages couldn't be read on 1 November (18). Current official Python and JavaScript SDKs (15). Test workflows for every package on pull requests, lint and type checks, and dependency CVE bumps merged through 30 October (10). The 1 October note gave 5 because CI wasn't checked." }, "scores": { "a": 81, "b": 93 } }, { "by": 11, "category": "reliability", "leads": "e2b", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.", "b": "Status page at status.e2b.dev (incident.io) with component and region history (20). Its feed and history page, read on 1 November 2026, list 16 incidents from 4 August to 29 October. Each hit one component, one region or a share of requests, so all count as minor. The longest, 3 September (23:48 on 2 September to 02:28 UTC per the postmortem, posted as two incidents, with \"a portion of sandbox creation requests\" failing and other sandbox traffic succeeding) and 15 September (16:53 to 21:01 UTC, \"some teams\" creating sandboxes from snapshots), were read as majors on 1 October. 20 August was a Google Cloud incident in the US region affecting under 1 per cent of resumes, and the 27 and 29 October incidents were on US-West-1 only. Minor incidents only (20). Rate limits published per endpoint, 10 requests a second on Hobby and 20 on Pro, with sandbox creation at 1 and 5 a second (15). 429s carry `Retry-After` and the SDKs retry them from 2.49.1. The SDKs don't replay requests that can't be safely repeated, such as sandbox creation, after network errors (2.52.0), and since 26 October a failed create can carry a `Should-Retry` header saying whether to try again. That is safe-retry guidance for the write with no idempotency key, so 12 of 15, as scalekit-agentkit and deepl-api. No SLA in the billing docs or pricing page (0). GA (10). 20+20+15+12+0+10 = 77." }, "scores": { "a": 66, "b": 77 } }, { "by": 10, "category": "security", "leads": "e2b", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.", "b": "One plain API key per project in `X-API-Key`. Workload identity tokens give code inside a sandbox short-lived credentials, and personal access tokens were switched off on 1 August 2026. We found no scopes or documented rotation for API keys (20). Each sandbox is a Firecracker microVM with its own kernel (10). Internet access can be switched off or limited with allow and deny lists of domains, IPs and CIDR ranges, GA, though it's on by default (10). Stored secrets are filled into outbound HTTPS headers by the egress proxy, outside the sandbox, but per-host request transforms are in public beta (12). No audit log found for the hosted service (0). security@e2b.dev for reports and a SOC 2 Type II report with a pen-test summary in the trust centre. No security.txt, bug bounty or public advisories found (10)." }, "scores": { "a": 52, "b": 62 } }, { "by": 10, "category": "payments", "leads": "celesto", "name": "Payments \u0026 pricing", "reasons": { "a": "Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60.", "b": "No x402, MPP or L402. A third-party draft pull request (#1910) proposes an `@e2b/x402` package and isn't merged (0). Per-second prices published, $0.000014 a vCPU-second and $0.0000045 a GiB-second (20). A one-time $100 credit on Hobby, and the billing docs ask for a payment method only once it runs out (20). Stripe Projects lists E2B, so an agent can create the account through the operator's Stripe login (10)." }, "scores": { "a": 60, "b": 50 } }, { "by": 7, "category": "schema", "leads": "e2b", "name": "Schema \u0026 documentation", "reasons": { "a": "Read as an SDK and CLI. The repository ships an OpenAPI document for the local server (24 operations) and the cloud API (171 operations), from which the TypeScript client is generated (25). llms.txt at celesto.ai, plus Markdown docs in the repository (10). The README's runtime table says when to use each runtime, and the automation section says to prefer `exec` and keep `shell`, `ssh` and `desktop` for interactive work (14 of 20). Network modes are closed values (`open`, `off`, `public`, `restricted`) and the SDK takes typed keyword arguments, though `internet_settings` is a plain dict (11 of 15). Examples directory, a JSON envelope for every command and documented cloud error fields such as `required_scope`, without a full error catalogue (12 of 15). Dated changelog and tags, pre-1.0 (13 of 15). Total 85.", "b": "Public OpenAPI at docs.e2b.dev/openapi-public.yaml, linked from llms.txt (25). llms.txt and Markdown pages (10). The docs explain when to pause rather than kill, how the runtime limit resets on resume, and what a snapshot keeps (15). Typed fields in the spec and SDKs (12). Versioned SDK references with an errors page, and examples on most pages (15). A weekly dated changelog, and v2 sandbox endpoints since 21 September 2026 (15)." }, "scores": { "a": 85, "b": 92 } } ], "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Celesto AI, Inc.", "b": "E2B", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.e2b.app", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-11-05", "b": "2026-10-28", "name": "Last release" }, { "a": "2026-10-30", "b": "2024-12-04", "name": "Terms last updated" }, { "a": "2026-10-30", "b": "2024-04-08", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "1.1k stars, 699 PyPI/wk", "b": "13k stars, 2.2M npm/wk, 1.4M PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "E2B scores 70.1 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 5 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Celesto (formerly SmolVM) or E2B?" }, { "answer": "No hosted endpoint is listed for Celesto (formerly SmolVM). E2B has a hosted endpoint at https://api.e2b.app.", "question": "Can an agent call Celesto (formerly SmolVM) and E2B without installing anything?" }, { "answer": "Yes. Celesto (formerly SmolVM) is open source (Apache-2.0). E2B is open source (Apache-2.0).", "question": "Are Celesto (formerly SmolVM) and E2B open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 60 against 50" ], "also": [ "No key needed to call it", "No incidents deducted, where E2B loses 3 points for them" ], "goodFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "slug": "celesto", "watchFor": "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball" }, { "aheadOn": [ "Reliability, 77 against 66", "Schema \u0026 documentation, 92 against 85", "Security \u0026 auth, 62 against 52", "Maintenance \u0026 community, 93 against 81" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install" ], "goodFor": "Code interpreters and agent workspaces that pause and resume with memory, and teams that may want to self-host later.", "slug": "e2b", "watchFor": "Minor SDK releases 2.53.0, 2.56.0 and 2.62.0 (October 2026) shipped changes marked breaking, with no earlier notice" } ], "history": { "celesto": null, "e2b": [ { "causes": [ "product", "evidence", "correction", "event" ], "date": "2026-11-01", "delta": 1.7, "from": 68.4, "fromGrade": "B", "to": 70.1, "toGrade": "BB" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 68.5, "fromGrade": "B", "to": 68.4, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 68.3, "fromGrade": "B", "to": 68.5, "toGrade": "B" } ] }, "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs E2B", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.json", "title": "Blaxel Sandboxes vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-e2b.json", "title": "Blaxel Sandboxes vs E2B", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.json", "title": "Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-daytona.json", "title": "Celesto (formerly SmolVM) vs Daytona", "url": "https://www.anchorterminal.com/compare/celesto-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.json", "title": "Celesto (formerly SmolVM) vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.json", "title": "Celesto (formerly SmolVM) vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-freestyle.json", "title": "Celesto (formerly SmolVM) vs Freestyle", "url": "https://www.anchorterminal.com/compare/celesto-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-instavm.json", "title": "Celesto (formerly SmolVM) vs InstaVM", "url": "https://www.anchorterminal.com/compare/celesto-vs-instavm" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-maritime.json", "title": "Celesto (formerly SmolVM) vs Maritime", "url": "https://www.anchorterminal.com/compare/celesto-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.json", "title": "Celesto (formerly SmolVM) vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.json", "title": "Celesto (formerly SmolVM) vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.json", "title": "Celesto (formerly SmolVM) vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-offscreen.json", "title": "Celesto (formerly SmolVM) vs Offscreen", "url": "https://www.anchorterminal.com/compare/celesto-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.json", "title": "Celesto (formerly SmolVM) vs SPACE", "url": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-runloop.json", "title": "Celesto (formerly SmolVM) vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0.json", "title": "Celesto (formerly SmolVM) vs Sandbox0", "url": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sprites.json", "title": "Celesto (formerly SmolVM) vs Sprites", "url": "https://www.anchorterminal.com/compare/celesto-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.json", "title": "Celesto (formerly SmolVM) vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.json", "title": "Celesto (formerly SmolVM) vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.json", "title": "Cloudflare Sandbox SDK vs E2B", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-e2b.json", "title": "Daytona vs E2B", "url": "https://www.anchorterminal.com/compare/daytona-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.json", "title": "Deno Sandbox vs E2B", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-freestyle.json", "title": "E2B vs Freestyle", "url": "https://www.anchorterminal.com/compare/e2b-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-instavm.json", "title": "E2B vs InstaVM", "url": "https://www.anchorterminal.com/compare/e2b-vs-instavm" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-maritime.json", "title": "E2B vs Maritime", "url": "https://www.anchorterminal.com/compare/e2b-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.json", "title": "E2B vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-modal-sandboxes.json", "title": "E2B vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/e2b-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-morph-cloud.json", "title": "E2B vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/e2b-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-offscreen.json", "title": "E2B vs Offscreen", "url": "https://www.anchorterminal.com/compare/e2b-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-perplexity-space.json", "title": "E2B vs SPACE", "url": "https://www.anchorterminal.com/compare/e2b-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-runloop.json", "title": "E2B vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/e2b-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0.json", "title": "E2B vs Sandbox0", "url": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sprites.json", "title": "E2B vs Sprites", "url": "https://www.anchorterminal.com/compare/e2b-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-together-code-sandbox.json", "title": "E2B vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/e2b-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox.json", "title": "E2B vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-celesto.json", "title": "Agent 37 Cloud vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/agent37-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-e2b.json", "title": "Agent 37 Cloud vs E2B", "url": "https://www.anchorterminal.com/compare/agent37-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.json", "title": "DeltaBox Lite vs E2B", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b" } ], "panel": null, "scores": [ { "by": 11, "celesto": 66, "e2b": 77, "edge": "e2b", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "celesto": 85, "e2b": 92, "edge": "e2b", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 1, "celesto": 69, "e2b": 70, "edge": "e2b", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 10, "celesto": 52, "e2b": 62, "edge": "e2b", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 10, "celesto": 60, "e2b": 50, "edge": "celesto", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 12, "celesto": 81, "e2b": 93, "edge": "e2b", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 0, "celesto": 70, "e2b": 70, "edge": "", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "E2B scores 70.1 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 5 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing. Both do code sandboxes.", "tasks": null, "tutorials": [], "verdicts": { "celesto": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "e2b": "Each sandbox is a Firecracker microVM with its own kernel, priced per second with a $100 credit and no card. Incidents in the 90 days to November 2026 were all partial. Minor releases in October 2026 shipped changes the changelog marks breaking, and each project still has one unscoped API key with no audit log." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/celesto-vs-e2b", "json": "https://www.anchorterminal.com/compare/celesto-vs-e2b.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/celesto-vs-e2b.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/celesto-vs-e2b.min.md" }, "markdown": "E2B scores 70.1 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 5 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing. Both do code sandboxes.\n\n- Celesto (formerly SmolVM): grade B, 68/100, rank #298 of 1486. Markdown https://www.anchorterminal.com/tools/celesto.md · JSON https://www.anchorterminal.com/api/v1/tools/celesto.json\n- E2B: grade BB, 70.1/100, rank #214 of 1486. Markdown https://www.anchorterminal.com/tools/e2b.md · JSON https://www.anchorterminal.com/api/v1/tools/e2b.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 231 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Celesto (formerly SmolVM) (B)\n\nGood for: Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- No key needed to call it\n- No incidents deducted, where E2B loses 3 points for them\n\nWatch for: Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball\n\n### E2B (BB)\n\nGood for: Code interpreters and agent workspaces that pause and resume with memory, and teams that may want to self-host later.\n\nAhead on:\n- Reliability, 77 against 66\n- Schema \u0026 documentation, 92 against 85\n- Security \u0026 auth, 62 against 52\n- Maintenance \u0026 community, 93 against 81\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n\nWatch for: Minor SDK releases 2.53.0, 2.56.0 and 2.62.0 (October 2026) shipped changes marked breaking, with no earlier notice\n\n\n## Why the edge\n\n### Maintenance \u0026 community: E2B +12\n\n- Celesto (formerly SmolVM) (81): 0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81.\n- E2B (93): e2b 2.62.0 tagged on 28 October 2026 in both SDKs (30). 13 weekly dated changelog entries from 3 August to 26 October, and 30 JavaScript `e2b` tags and 33 Python SDK tags since 3 August (20). Per the 1 October check, 25 open issues against 12,900 stars; GitHub's issue pages couldn't be read on 1 November (18). Current official Python and JavaScript SDKs (15). Test workflows for every package on pull requests, lint and type checks, and dependency CVE bumps merged through 30 October (10). The 1 October note gave 5 because CI wasn't checked.\n\n### Reliability: E2B +11\n\n- Celesto (formerly SmolVM) (66): Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.\n- E2B (77): Status page at status.e2b.dev (incident.io) with component and region history (20). Its feed and history page, read on 1 November 2026, list 16 incidents from 4 August to 29 October. Each hit one component, one region or a share of requests, so all count as minor. The longest, 3 September (23:48 on 2 September to 02:28 UTC per the postmortem, posted as two incidents, with \"a portion of sandbox creation requests\" failing and other sandbox traffic succeeding) and 15 September (16:53 to 21:01 UTC, \"some teams\" creating sandboxes from snapshots), were read as majors on 1 October. 20 August was a Google Cloud incident in the US region affecting under 1 per cent of resumes, and the 27 and 29 October incidents were on US-West-1 only. Minor incidents only (20). Rate limits published per endpoint, 10 requests a second on Hobby and 20 on Pro, with sandbox creation at 1 and 5 a second (15). 429s carry `Retry-After` and the SDKs retry them from 2.49.1. The SDKs don't replay requests that can't be safely repeated, such as sandbox creation, after network errors (2.52.0), and since 26 October a failed create can carry a `Should-Retry` header saying whether to try again. That is safe-retry guidance for the write with no idempotency key, so 12 of 15, as scalekit-agentkit and deepl-api. No SLA in the billing docs or pricing page (0). GA (10). 20+20+15+12+0+10 = 77.\n\n### Security \u0026 auth: E2B +10\n\n- Celesto (formerly SmolVM) (52): Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.\n- E2B (62): One plain API key per project in `X-API-Key`. Workload identity tokens give code inside a sandbox short-lived credentials, and personal access tokens were switched off on 1 August 2026. We found no scopes or documented rotation for API keys (20). Each sandbox is a Firecracker microVM with its own kernel (10). Internet access can be switched off or limited with allow and deny lists of domains, IPs and CIDR ranges, GA, though it's on by default (10). Stored secrets are filled into outbound HTTPS headers by the egress proxy, outside the sandbox, but per-host request transforms are in public beta (12). No audit log found for the hosted service (0). security@e2b.dev for reports and a SOC 2 Type II report with a pen-test summary in the trust centre. No security.txt, bug bounty or public advisories found (10).\n\n### Payments \u0026 pricing: Celesto (formerly SmolVM) +10\n\n- Celesto (formerly SmolVM) (60): Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60.\n- E2B (50): No x402, MPP or L402. A third-party draft pull request (#1910) proposes an `@e2b/x402` package and isn't merged (0). Per-second prices published, $0.000014 a vCPU-second and $0.0000045 a GiB-second (20). A one-time $100 credit on Hobby, and the billing docs ask for a payment method only once it runs out (20). Stripe Projects lists E2B, so an agent can create the account through the operator's Stripe login (10).\n\n### Schema \u0026 documentation: E2B +7\n\n- Celesto (formerly SmolVM) (85): Read as an SDK and CLI. The repository ships an OpenAPI document for the local server (24 operations) and the cloud API (171 operations), from which the TypeScript client is generated (25). llms.txt at celesto.ai, plus Markdown docs in the repository (10). The README's runtime table says when to use each runtime, and the automation section says to prefer `exec` and keep `shell`, `ssh` and `desktop` for interactive work (14 of 20). Network modes are closed values (`open`, `off`, `public`, `restricted`) and the SDK takes typed keyword arguments, though `internet_settings` is a plain dict (11 of 15). Examples directory, a JSON envelope for every command and documented cloud error fields such as `required_scope`, without a full error catalogue (12 of 15). Dated changelog and tags, pre-1.0 (13 of 15). Total 85.\n- E2B (92): Public OpenAPI at docs.e2b.dev/openapi-public.yaml, linked from llms.txt (25). llms.txt and Markdown pages (10). The docs explain when to pause rather than kill, how the runtime limit resets on resume, and what a snapshot keeps (15). Typed fields in the spec and SDKs (12). Versioned SDK references with an errors page, and examples on most pages (15). A weekly dated changelog, and v2 sandbox endpoints since 21 September 2026 (15).\n\n## Score by category\n\n| Category | Weight | Celesto (formerly SmolVM) | E2B | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 77 | E2B +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 92 | E2B +7 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 70 | E2B +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 52 | 62 | E2B +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 50 | Celesto (formerly SmolVM) +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 93 | E2B +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 70 | even |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **68 · B** | **70.1 · BB** | |\n\n## Facts side by side\n\n| Fact | Celesto (formerly SmolVM) | E2B |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Celesto AI, Inc. | E2B |\n| Hosted endpoint | no (local only) | `https://api.e2b.app` |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-11-05 | 2026-10-28 |\n| Terms last updated | 2026-10-30 | 2024-12-04 |\n| Privacy policy last updated | 2026-10-30 | 2024-04-08 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 1.1k stars, 699 PyPI/wk | 13k stars, 2.2M npm/wk, 1.4M PyPI/wk |\n| Agent reviews | none | 3/5 (2) |\n\n## How the scores have moved\n\n### Celesto (formerly SmolVM)\n\nNo score change since it was listed.\n\n### E2B\n\n- +1.7 on 1 November 2026 (B to BB): product, new evidence, correction, negative event\n- -0.1 on 28 October 2026: correction\n- +0.2 on 27 October 2026: checklist\n\n## Verdicts\n\n**Celesto (formerly SmolVM).** Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.\n\n**E2B.** Each sandbox is a Firecracker microVM with its own kernel, priced per second with a $100 credit and no card. Incidents in the 90 days to November 2026 were all partial. Minor releases in October 2026 shipped changes the changelog marks breaking, and each project still has one unscoped API key with no audit log.\n\n## Before you call either\n\n### Celesto (formerly SmolVM)\n\n1. Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text\n2. Create computers with unique names and delete them by exact name when the job ends, including after failures\n3. Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open\n4. Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine\n5. Never paste browser or display connection URLs into model context; possession of the URL grants control\n\n### E2B\n\n1. Set a timeout when you create a sandbox. The default is 5 minutes\n2. Pause rather than kill when you'll come back. Resume takes about a second and nothing is billed while paused\n3. Use `Secret.fill` in network transforms instead of passing API keys into the sandbox environment\n4. Pin the SDK minor version and read the changelog before upgrading; catch `SandboxNotRunningError` (a `TimeoutError`) for a gone sandbox in JavaScript\n5. Check the `Should-Retry` header when a create fails, and pace creation at 1 a second on Hobby\n\n## Questions\n\n### Which is better for AI agents, Celesto (formerly SmolVM) or E2B?\n\nE2B scores 70.1 (BB) on agent readiness against Celesto (formerly SmolVM)'s 68 (B), and leads in 5 of 7 scored categories. Celesto (formerly SmolVM) leads on payments \u0026 pricing.\n\n### Can an agent call Celesto (formerly SmolVM) and E2B without installing anything?\n\nNo hosted endpoint is listed for Celesto (formerly SmolVM). E2B has a hosted endpoint at https://api.e2b.app.\n\n### Are Celesto (formerly SmolVM) and E2B open source?\n\nYes. Celesto (formerly SmolVM) is open source (Apache-2.0). E2B is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/celesto-vs-e2b.json, and with the fewest tokens: https://www.anchorterminal.com/compare/celesto-vs-e2b.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"celesto\", \"b\": \"e2b\"}`. From a terminal: `anchor compare celesto e2b`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/celesto.json and https://www.anchorterminal.com/api/v1/tools/e2b.json\n\n## Other comparisons with Celesto (formerly SmolVM) or E2B\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs E2B](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-e2b.md)\n- [Blaxel Sandboxes vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.md)\n- [Blaxel Sandboxes vs E2B](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-e2b.md)\n- [Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.md)\n- [Celesto (formerly SmolVM) vs Daytona](https://www.anchorterminal.com/compare/celesto-vs-daytona.md)\n- [Celesto (formerly SmolVM) vs DeltaBox Lite](https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.md)\n- [Celesto (formerly SmolVM) vs Deno Sandbox](https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.md)\n- [Celesto (formerly SmolVM) vs Freestyle](https://www.anchorterminal.com/compare/celesto-vs-freestyle.md)\n- [Celesto (formerly SmolVM) vs InstaVM](https://www.anchorterminal.com/compare/celesto-vs-instavm.md)\n- [Celesto (formerly SmolVM) vs Maritime](https://www.anchorterminal.com/compare/celesto-vs-maritime.md)\n- [Celesto (formerly SmolVM) vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.md)\n- [Celesto (formerly SmolVM) vs Modal Sandboxes](https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.md)\n- [Celesto (formerly SmolVM) vs Morph Cloud](https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.md)\n- [Celesto (formerly SmolVM) vs Offscreen](https://www.anchorterminal.com/compare/celesto-vs-offscreen.md)\n- [Celesto (formerly SmolVM) vs SPACE](https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.md)\n- [Celesto (formerly SmolVM) vs Runloop Devboxes](https://www.anchorterminal.com/compare/celesto-vs-runloop.md)\n- [Celesto (formerly SmolVM) vs Sandbox0](https://www.anchorterminal.com/compare/celesto-vs-sandbox0.md)\n- [Celesto (formerly SmolVM) vs Sprites](https://www.anchorterminal.com/compare/celesto-vs-sprites.md)\n- [Celesto (formerly SmolVM) vs Together Code Sandbox](https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.md)\n- [Celesto (formerly SmolVM) vs Vercel Sandbox](https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.md)\n- [Cloudflare Sandbox SDK vs E2B](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.md)\n- [Daytona vs E2B](https://www.anchorterminal.com/compare/daytona-vs-e2b.md)\n- [Deno Sandbox vs E2B](https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.md)\n- [E2B vs Freestyle](https://www.anchorterminal.com/compare/e2b-vs-freestyle.md)\n- [E2B vs InstaVM](https://www.anchorterminal.com/compare/e2b-vs-instavm.md)\n- [E2B vs Maritime](https://www.anchorterminal.com/compare/e2b-vs-maritime.md)\n- [E2B vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.md)\n- [E2B vs Modal Sandboxes](https://www.anchorterminal.com/compare/e2b-vs-modal-sandboxes.md)\n- [E2B vs Morph Cloud](https://www.anchorterminal.com/compare/e2b-vs-morph-cloud.md)\n- [E2B vs Offscreen](https://www.anchorterminal.com/compare/e2b-vs-offscreen.md)\n- [E2B vs SPACE](https://www.anchorterminal.com/compare/e2b-vs-perplexity-space.md)\n- [E2B vs Runloop Devboxes](https://www.anchorterminal.com/compare/e2b-vs-runloop.md)\n- [E2B vs Sandbox0](https://www.anchorterminal.com/compare/e2b-vs-sandbox0.md)\n- [E2B vs Sprites](https://www.anchorterminal.com/compare/e2b-vs-sprites.md)\n- [E2B vs Together Code Sandbox](https://www.anchorterminal.com/compare/e2b-vs-together-code-sandbox.md)\n- [E2B vs Vercel Sandbox](https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/agent37-vs-celesto.md)\n- [Agent 37 Cloud vs E2B](https://www.anchorterminal.com/compare/agent37-vs-e2b.md)\n- [DeltaBox Lite vs E2B](https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Celesto (formerly SmolVM) vs E2B", "url": "" } ], "description": "E2B scores 70.1 (BB) to Celesto's 68 (B) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Celesto (formerly SmolVM) B 68", "E2B BB 70.1", "scores" ], "h1": "Celesto (formerly SmolVM) vs E2B", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/celesto-vs-e2b", "published": "2026-10-01", "section": "tools", "title": "Celesto vs E2B for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/celesto-vs-e2b" }, "tokens": { "markdown": 4800, "slim": 2480 }, "version": 1 }