{ "data": { "a": { "slug": "celesto", "name": "Celesto (formerly SmolVM)", "vendor": "Celesto AI, Inc.", "vendorUrl": "https://celesto.ai", "kind": "sdk", "category": "code-sandboxes", "summary": "Celesto, formerly SmolVM, is an open-source Python SDK and CLI from Celesto AI that runs disposable Firecracker or QEMU microVMs on the owner's machine for agent code, browsers and desktops, with an optional paid Celesto Cloud.", "url": "https://www.anchorterminal.com/tools/celesto", "markdownUrl": "https://www.anchorterminal.com/tools/celesto.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/celesto.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/celesto.json", "dns": "celesto.grade.anchorterminal.com", "repo": "https://github.com/CelestoAI/Celesto", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "celesto" } ], "auth": "none", "authNotes": "Local use needs no account or key. The local API server and dashboard each require a bearer token, generated at start or read from CELESTO_SERVER_TOKEN and CELESTO_DASHBOARD_TOKEN. Celesto Cloud uses an organisation-bound CELESTO_API_KEY with named permissions (see, execute, delete) set in the dashboard.", "pricing": "freemium", "pricingNotes": "The local SDK and CLI are free under Apache-2.0. Celesto Cloud bills sandboxes by the running hour from $0.015 (Micro, 1 vCPU, 2 GB) to $0.16 (XL, 8 vCPU, 32 GB), prepaid from $2.01, with a one-time $5 Micro credit and no card.", "priceSummary": "$0.015 / session-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs, llms.txt or the pricing page (checked 2026-11-06). Cloud runtime is prepaid by card under Settings \u003e Billing.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1149, "npmWeekly": null, "pypiWeekly": 699, "asOf": "2026-11-06" }, "docsUrl": "https://celesto.ai/docs", "llmsTxt": "https://celesto.ai/llms.txt", "openapi": "https://github.com/CelestoAI/Celesto/blob/main/ts/celesto-local-server.openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "no-card", "free-tier", "apache-2.0", "python", "typescript", "cli", "microvm", "firecracker", "llms-txt", "openapi", "telemetry", "pre-1.0", "renamed" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 298, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "bestFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "strengths": [ "Apache-2.0, installs from PyPI with `celesto setup` and `celesto doctor`, and runs local microVMs with no account or key", "Every `--json` response has the same `ok`, `command`, `exit_code`, `data` and `error` fields, with recovery commands in errors", "Network modes `off`, `public` (proxy that rejects private and metadata addresses) and `restricted` with CIDR or domain allowlists", "Dated changelog with Security sections, breaking changes marked, and 22 PyPI releases in the 90 days to 6 November 2026", "OpenAPI documents for the local server (24 operations) and the cloud API (171 operations) in the repository, plus llms.txt" ], "weaknesses": [ "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball", "Outbound network access is open by default, and Linux TAP mode does not block every private network or metadata service", "Usage telemetry to PostHog is on after a first-use notice, until switched off", "Renamed from SmolVM on 19 September 2026 in a breaking release that removed the `smolvm` command and import path", "No security.txt, bug bounty or certification found, and CI results could not be read" ], "agentNotes": [ "Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text", "Create computers with unique names and delete them by exact name when the job ends, including after failures", "Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open", "Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine", "Never paste browser or display connection URLs into model context; possession of the URL grants control" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 74 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install celesto \u0026\u0026 celesto setup \u0026\u0026 celesto doctor", "headless": { "create": "celesto computer create --name agent-job --json", "delete": "celesto computer delete agent-job --json", "exec": "celesto computer exec agent-job --json -- python -m pytest" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/celesto" }, "area": "agent-runtime", "unitPrices": [ { "item": "Cloud Micro sandbox (1 vCPU, 2 GB)", "unit": "session-hour", "usd": 0.015, "note": "Billed by the running hour; local use is free" }, { "item": "Cloud XL sandbox (8 vCPU, 32 GB)", "unit": "session-hour", "usd": 0.16, "note": "Largest size on the pricing page" } ], "provenance": { "legalEntity": "Celesto AI, Inc.", "domain": "celesto.ai", "domainRegistered": "2025-07-13", "endpointOnVendorDomain": null, "terms": "https://celesto.ai/legal/terms", "privacy": "https://celesto.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The privacy policy, last updated 30 October 2026, names Celesto AI, Inc., a Delaware corporation with a Wilmington mailing address. It has no clause on automated access.", "celesto.ai/robots.txt allows all crawlers. docs.celesto.ai carries Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives celesto.ai a registration date of 13 July 2025.", "/.well-known/security.txt returns 404. SECURITY.md asks for private reports through GitHub's vulnerability reporting. No status page is linked from the pricing page." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/celesto.json", "live": { "slug": "celesto", "versions": [ { "registry": "github", "name": "CelestoAI/Celesto", "version": "v0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.416837168Z" }, { "registry": "pypi", "name": "celesto", "version": "0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.309276304Z" } ], "githubStars": 1149, "pypiWeekly": 699, "securityTxt": { "url": "https://celesto.ai/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-07T16:01:01.176888246Z" }, "llmsTxt": { "url": "https://celesto.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:46.784166983Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/CelestoAI/Celesto/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:00.719411253Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8ddae4a6adbd" }, { "url": "https://celesto.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:00:50.868104256Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87ce310b1db6" }, { "url": "https://celesto.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:00:53.107282947Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1dece6f9a42e" } ], "updatedAt": "2026-11-07T16:01:01.176888246Z" } }, "answer": "Celesto (formerly SmolVM) and Maritime score within a point of each other on agent readiness, 68 (B) and 67.5 (B). Maritime leads on agent ergonomics and security \u0026 auth.", "b": { "slug": "maritime", "name": "Maritime", "vendor": "Maritime AI, Inc.", "vendorUrl": "https://maritime.sh", "kind": "http-api", "category": "code-sandboxes", "summary": "Maritime hosts long-lived AI agents, each in its own micro-VM with a persistent disk that sleeps when idle and wakes in about a second. Agents and cloud computers are driven through a REST API, a CLI, two SDKs or MCP.", "url": "https://www.anchorterminal.com/tools/maritime", "markdownUrl": "https://www.anchorterminal.com/tools/maritime.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/maritime.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/maritime.json", "dns": "maritime.grade.anchorterminal.com", "repo": "https://github.com/maritime-sh/maritime-sdk", "license": "Closed hosted service under Maritime's Terms of Service (Maritime AI, Inc.), last updated 17 May 2026. The TypeScript and Python SDKs are MIT-licensed.", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.maritime.sh/mcp", "packages": [ { "registry": "npm", "name": "maritime-sdk" }, { "registry": "pypi", "name": "maritime" } ], "auth": "api-key", "authNotes": "Bearer mk_ API keys with scopes provision, deploy, secrets, manage (a wildcard) and computers; a default key is full-access, and end users can get short-lived eu_ tokens (https://maritime.sh/docs/sdk/authentication). The Computers MCP server at https://mcp.maritime.sh/mcp takes the same bearer key (https://maritime.sh/docs/computers). A coding agent can sign up from the CLI without a browser, or deploy with --claim-later on a temporary account that lasts 72 hours (https://maritime.sh/agents.md).", "pricing": "paid", "pricingNotes": "Plans whose fee becomes usage credit, one for one. Starter US$20, Growth US$100, Scale US$500 and Dedicated US$5,000 a month, with 5, 25, 60 and 500 machines awake at once, and Enterprise custom. Machines are billed per second, with sandboxes at US$0.0055 per vCPU-hour plus US$0.00275 per GB-hour (US$0.022 an hour for 2 vCPU and 4 GB), agent boxes US$1 a month per 2 GB with 5 GB of disk, Linux desktops US$0.12, Windows US$0.18 and Android phones US$0.15 an hour, and US$0.08 per GB-month of disk. New accounts get a 7-day trial with up to US$20 of usage, which needs a card; accounts on the earlier seat plans keep them. Model calls through the proxy are charged at provider list price (https://maritime.sh/pricing and https://maritime.sh/docs/billing.md). Checked 1 November 2026.", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found in maritime.sh's llms.txt, pricing, billing docs or OpenAPI file, checked 21 October 2026.", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-21" }, "docsUrl": "https://maritime.sh/docs", "llmsTxt": "https://maritime.sh/llms.txt", "openapi": "https://api.maritime.sh/openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "hosted", "official", "closed-source", "microvm", "persistent", "openapi", "cli", "typescript", "python", "mcp", "llms-txt", "free-tier", "no-card", "subscription" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 67.5, "grade": "B", "agentReady": false, "rank": 318, "ranked": true, "rankOf": 1486, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 87, "maintenance": 81, "payments": 60, "reliability": 45, "schema": 87, "security": 68, "transparency": 66 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -2, "negativeNotes": [ "-2, misleading claim. The privacy policy (last updated 28 September 2026) says Maritime may share information \"only\" with Stripe, Railway, AWS, Hetzner and Neon among service providers, while its security page (current as of 26 October 2026) lists ten sub-processors, including OpenAI and Anthropic for model calls through its proxy, PostHog, Resend and Google Workspace. https://maritime.sh/privacy, https://maritime.sh/security" ], "verdict": "Maritime hosts persistent agents and per-second sandboxes in micro-VMs, with a public OpenAPI file, scoped keys, retry hints and Markdown docs written for coding agents. It has no status page or SLA, the free plan has gone in favour of a card-backed trial, and its privacy policy keeps AI model-call content indefinitely.", "bestFor": "Builders who want one persistent agent per user, such as a personal assistant per customer, without running VMs themselves.", "strengths": [ "Public OpenAPI file, llms.txt and every docs page in Markdown.", "Per-second machine rates published without a login, from US$0.022 an hour for a 2 vCPU sandbox.", "Scoped, revocable API keys, short-lived end-user tokens and server-enforced egress rules per agent.", "A valid security.txt and a security page listing ten sub-processors with locations.", "Weekly changelog entries from 24 July to 31 October 2026." ], "weaknesses": [ "No status page or SLA.", "AI model-call content is kept indefinitely, including after account deletion, which the security page's deletion terms contradict.", "The free plan is gone for new accounts, and the 7-day trial needs a card.", "A default API key is full-access.", "The OpenAPI file is still at version 0.1.0." ], "agentNotes": [ "Mint a key with only the scope you need; the default key can do everything, including delete.", "Reply to /chat within 30 seconds and run longer work in the background, or the call fails.", "Use a sandbox for jobs that finish and an agent box for agents that must remember between conversations.", "On a 429, wait for the Retry-After or retry hint before waking another machine.", "Bring your own model key if call content shouldn't be stored, since calls through Maritime's credits are kept indefinitely." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.5 } ], "editorialScores": { "ergonomics": 87, "maintenance": 81, "payments": 60, "reliability": 45, "schema": 87, "security": 68, "transparency": 54 }, "provenanceScore": 77, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install maritime-sdk # or: pip install maritime", "claudeCode": "claude mcp add --transport http maritime-computers https://mcp.maritime.sh/mcp --header \"Authorization: Bearer $MARITIME_API_KEY\"" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/maritime" }, "area": "agent-runtime", "unitPrices": [ { "item": "Maritime Starter", "unit": "month", "usd": 20, "note": "US$20 of usage credit, 5 machines awake at once. Checked 1 November 2026." }, { "item": "Maritime Growth", "unit": "month", "usd": 100, "note": "US$100 of usage credit, 25 machines awake at once." }, { "item": "Maritime Scale", "unit": "month", "usd": 500, "note": "US$500 of usage credit, 60 machines awake at once." }, { "item": "Agent box", "unit": "month", "usd": 1, "note": "Per 2 GB of memory, awake or asleep, 5 GB of disk included." }, { "item": "Sandbox CPU", "unit": "vcpu-hour", "usd": 0.0055, "note": "Plus US$0.00275 per GB-hour of memory, billed per second." }, { "item": "Linux desktop", "unit": "session-hour", "usd": 0.12, "note": "2 vCPU and 4 GB, per hour awake." }, { "item": "Disk while asleep", "unit": "gb-month", "usd": 0.08 } ], "provenance": { "legalEntity": "Maritime AI, Inc.", "domain": "maritime.sh", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://maritime.sh/terms", "privacy": "https://maritime.sh/privacy", "statusPage": "", "changelog": "https://maritime.sh/changelog", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "Terms last updated 17 May 2026, privacy policy 28 September 2026, both naming Maritime AI, Inc. The security page is current as of 26 October 2026.", "No status page linked, and status.maritime.sh doesn't resolve.", "maritime.sh/.well-known/security.txt is valid, with security@maritime.sh, a policy link to maritime.sh/security and an expiry of 27 October 2027.", "rdap.org returned no registration event for maritime.sh (per the 21 October check)." ], "score": 77 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/maritime.json", "live": { "slug": "maritime", "probe": { "target": "https://mcp.maritime.sh/mcp", "method": "get", "lastAt": "2026-11-07T18:20:37.647714421Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "dial tcp: lookup mcp.maritime.sh on 192.168.1.1:53: server misbehaving", "authRequired": false, "uptime24h": 99.58, "uptime30d": 99.98, "p50ms24h": 188, "p95ms24h": 277, "samples24h": 239, "samples30d": 4151, "days": [ { "date": "2026-10-21", "probes": 43, "ok": 43 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 186 } ] }, "versions": [ { "registry": "npm", "name": "maritime-sdk", "version": "0.11.0", "seenAt": "2026-11-06T23:42:40.970505273Z" }, { "registry": "pypi", "name": "maritime", "version": "0.10.0", "released": "2026-10-31", "seenAt": "2026-11-06T23:42:41.1866553Z" } ], "githubStars": 7, "npmWeekly": 10891, "pypiWeekly": 181, "securityTxt": { "url": "https://maritime.sh/.well-known/security.txt", "state": "valid", "expires": "2027-10-27T00:00:00.000Z", "checkedAt": "2026-11-07T16:00:24.205439562Z" }, "llmsTxt": { "url": "https://maritime.sh/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.281376281Z" }, "domain": { "domain": "maritime.sh", "checkedAt": "2026-11-01T14:07:40.231724894Z" }, "pages": [ { "url": "https://maritime.sh/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:13:49.974369046Z", "changedAt": "2026-11-05T12:37:06.022955585Z", "fingerprint": "7cc33feec786" }, { "url": "https://maritime.sh/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:13:52.183158878Z", "changedAt": "2026-11-05T12:37:08.130723473Z", "fingerprint": "82ac81369d3f" }, { "url": "https://maritime.sh/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:13:54.107502201Z", "changedAt": "2026-11-05T12:37:10.120718392Z", "fingerprint": "4a67f5495a9f" }, { "url": "https://maritime.sh/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:13:56.135703975Z", "changedAt": "2026-11-05T12:37:12.145698241Z", "fingerprint": "85ee10ebb2b3" } ], "mcpTools": { "url": "https://mcp.maritime.sh/mcp", "checkedAt": "2026-11-07T01:46:11.28497195Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:11.28497195Z" }, "github": { "repo": "maritime-sh/maritime-sdk", "checkedAt": "2026-11-02T08:25:50.191006621Z", "stars": 7, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-18T14:38:34Z", "openIssues": 0, "openPRs": 5, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0 }, "updatedAt": "2026-11-07T18:20:37.647714421Z" } }, "edges": [ { "by": 21, "category": "reliability", "leads": "celesto", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.", "b": "No status page found, status.maritime.sh still doesn't resolve, and none is linked from the docs, llms.txt or the security page (0). No readable incident history (5). Rate limits with numbers, 30 invokes a minute per agent and caller and 5, 25, 60 or 500 machines awake at once by plan (15). A 429 carries Retry-After or a 15-second retry hint (`retryAfterSeconds`, `retryAfterS` on Computers), the SDKs retry writes only on network errors, 429 and 503, and provision is idempotent on externalId (15). The terms (17 May 2026) say service is as available, with no SLA (0). Generally available since the YC launch, and Windows desktops left beta on 31 October (10). 0 + 5 + 15 + 15 + 0 + 10 = 45." }, "scores": { "a": 66, "b": 45 } }, { "by": 18, "category": "ergonomics", "leads": "maritime", "name": "Agent ergonomics", "reasons": { "a": "A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69.", "b": "Context cost. Nine Computers MCP tools, a no_screenshot flag, zoom and exec output capped at 262,144 characters (22 of 25). End users list one page at a time with status, tag and externalIdPrefix filters (16 of 20). Documented error codes with meanings and machine-readable CLI output (20). Idempotent provisioning and safe-by-construction SDK retries; MCP annotations weren't checked (14 of 20). Official TypeScript and Python SDKs and a CLI with defaults (15)." }, "scores": { "a": 69, "b": 87 } }, { "by": 16, "category": "security", "leads": "maritime", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.", "b": "Scoped mk_ keys (provision, deploy, secrets, manage, computers), revocable, with short-lived end-user tokens; a default key is full-access (26 of 30). Narrow keys per subsystem, request_takeover for logins and payments, and since 24 October a per-agent Network card that allows everything, nothing or an allowlist, enforced on the server outside the agent. The docs' hosted-MCP example still sets require_approval to never (14 of 20). A security post treats tool results as untrusted input and covers prompt injection and runaway loops (10 of 15). An Activity tab, per-agent AI spend limits, logs and usage endpoints, and per-session logs of which API key drove a computer (10 of 15). A valid security.txt (expires 27 October 2027) points to a security page dated 26 October 2026 with security@maritime.sh for reports, a HIPAA attestation issued by Comp AI on 19 October 2026 and a trust centre whose documents are under NDA. The SOC 2 programme is \"underway\", and no bounty or advisories were found. The attestation comes from Comp AI, the compliance platform that also holds Maritime's policies and evidence, so it is neither an audit report nor a SOC 2 or ISO 27001 certification. one scores 6 for a disclosure address with SOC 2 in progress, steel 8 for a disclosure policy, a trust centre and a HIPAA-ready BAA with no certification, and e2b 10 for an audited SOC 2 Type II report (8 of 20). 26 + 14 + 10 + 10 + 8 = 68." }, "scores": { "a": 52, "b": 68 } } ], "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Celesto AI, Inc.", "b": "Maritime AI, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.maritime.sh/mcp", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Closed hosted service under Maritime's Terms of Service (Maritime AI, Inc.), last updated 17 May 2026. The TypeScript and Python SDKs are MIT-licensed.", "name": "Licence" }, { "a": "none", "b": "9", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-11-05", "b": "2026-10-31", "name": "Last release" }, { "a": "2026-10-30", "b": "2026-05-17", "name": "Terms last updated" }, { "a": "2026-10-30", "b": "2026-09-28", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "1.1k stars, 699 PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "4/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Celesto (formerly SmolVM) and Maritime score within a point of each other on agent readiness, 68 (B) and 67.5 (B). Maritime leads on agent ergonomics and security \u0026 auth.", "question": "Which is better for AI agents, Celesto (formerly SmolVM) or Maritime?" }, { "answer": "No hosted endpoint is listed for Celesto (formerly SmolVM). Maritime has a hosted endpoint at https://mcp.maritime.sh/mcp.", "question": "Can an agent call Celesto (formerly SmolVM) and Maritime without installing anything?" }, { "answer": "Celesto (formerly SmolVM) is open source (Apache-2.0). No open-source release is listed for Maritime.", "question": "Are Celesto (formerly SmolVM) and Maritime open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 66 against 45" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "slug": "celesto", "watchFor": "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball" }, { "aheadOn": [ "Agent ergonomics, 87 against 69", "Security \u0026 auth, 68 against 52" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Builders who want one persistent agent per user, such as a personal assistant per customer, without running VMs themselves.", "slug": "maritime", "watchFor": "No status page or SLA." } ], "history": { "celesto": null, "maritime": [ { "causes": [ "pricing", "product", "event" ], "date": "2026-11-01", "delta": 0.9, "from": 66.6, "fromGrade": "B", "to": 67.5, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-30", "delta": 0, "from": 66.6, "fromGrade": "B", "to": 66.6, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 66.5, "fromGrade": "B", "to": 66.6, "toGrade": "B" } ] }, "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Maritime", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.json", "title": "Blaxel Sandboxes vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-maritime.json", "title": "Blaxel Sandboxes vs Maritime", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.json", "title": "Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-daytona.json", "title": "Celesto (formerly SmolVM) vs Daytona", "url": "https://www.anchorterminal.com/compare/celesto-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.json", "title": "Celesto (formerly SmolVM) vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.json", "title": "Celesto (formerly SmolVM) vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-e2b.json", "title": "Celesto (formerly SmolVM) vs E2B", "url": "https://www.anchorterminal.com/compare/celesto-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-freestyle.json", "title": "Celesto (formerly SmolVM) vs Freestyle", "url": "https://www.anchorterminal.com/compare/celesto-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-instavm.json", "title": "Celesto (formerly SmolVM) vs InstaVM", "url": "https://www.anchorterminal.com/compare/celesto-vs-instavm" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.json", "title": "Celesto (formerly SmolVM) vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.json", "title": "Celesto (formerly SmolVM) vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.json", "title": "Celesto (formerly SmolVM) vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/celesto-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-offscreen.json", "title": "Celesto (formerly SmolVM) vs Offscreen", "url": "https://www.anchorterminal.com/compare/celesto-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.json", "title": "Celesto (formerly SmolVM) vs SPACE", "url": "https://www.anchorterminal.com/compare/celesto-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-runloop.json", "title": "Celesto (formerly SmolVM) vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/celesto-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0.json", "title": "Celesto (formerly SmolVM) vs Sandbox0", "url": "https://www.anchorterminal.com/compare/celesto-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-sprites.json", "title": "Celesto (formerly SmolVM) vs Sprites", "url": "https://www.anchorterminal.com/compare/celesto-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.json", "title": "Celesto (formerly SmolVM) vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.json", "title": "Celesto (formerly SmolVM) vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-maritime.json", "title": "Cloudflare Sandbox SDK vs Maritime", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-maritime.json", "title": "Daytona vs Maritime", "url": "https://www.anchorterminal.com/compare/daytona-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-maritime.json", "title": "Deno Sandbox vs Maritime", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-maritime.json", "title": "E2B vs Maritime", "url": "https://www.anchorterminal.com/compare/e2b-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-maritime.json", "title": "Freestyle vs Maritime", "url": "https://www.anchorterminal.com/compare/freestyle-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/instavm-vs-maritime.json", "title": "InstaVM vs Maritime", "url": "https://www.anchorterminal.com/compare/instavm-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers.json", "title": "Maritime vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-modal-sandboxes.json", "title": "Maritime vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/maritime-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-morph-cloud.json", "title": "Maritime vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/maritime-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-offscreen.json", "title": "Maritime vs Offscreen", "url": "https://www.anchorterminal.com/compare/maritime-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-perplexity-space.json", "title": "Maritime vs SPACE", "url": "https://www.anchorterminal.com/compare/maritime-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-runloop.json", "title": "Maritime vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/maritime-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0.json", "title": "Maritime vs Sandbox0", "url": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sprites.json", "title": "Maritime vs Sprites", "url": "https://www.anchorterminal.com/compare/maritime-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-together-code-sandbox.json", "title": "Maritime vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/maritime-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-vercel-sandbox.json", "title": "Maritime vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/maritime-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-celesto.json", "title": "Agent 37 Cloud vs Celesto (formerly SmolVM)", "url": "https://www.anchorterminal.com/compare/agent37-vs-celesto" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-maritime.json", "title": "Agent 37 Cloud vs Maritime", "url": "https://www.anchorterminal.com/compare/agent37-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime.json", "title": "DeltaBox Lite vs Maritime", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime" } ], "panel": null, "scores": [ { "by": 21, "celesto": 66, "edge": "celesto", "key": "reliability", "maritime": 45, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "celesto": 85, "edge": "maritime", "key": "schema", "maritime": 87, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 18, "celesto": 69, "edge": "maritime", "key": "ergonomics", "maritime": 87, "name": "Agent ergonomics", "weight": 13 }, { "by": 16, "celesto": 52, "edge": "maritime", "key": "security", "maritime": 68, "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "celesto": 60, "edge": "", "key": "payments", "maritime": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 0, "celesto": 81, "edge": "", "key": "maintenance", "maritime": 81, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 4, "celesto": 70, "edge": "celesto", "key": "transparency", "maritime": 66, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Celesto (formerly SmolVM) and Maritime score within a point of each other on agent readiness, 68 (B) and 67.5 (B). Maritime leads on agent ergonomics and security \u0026 auth. Both do code sandboxes.", "tasks": null, "tutorials": [], "verdicts": { "celesto": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "maritime": "Maritime hosts persistent agents and per-second sandboxes in micro-VMs, with a public OpenAPI file, scoped keys, retry hints and Markdown docs written for coding agents. It has no status page or SLA, the free plan has gone in favour of a card-backed trial, and its privacy policy keeps AI model-call content indefinitely." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/celesto-vs-maritime", "json": "https://www.anchorterminal.com/compare/celesto-vs-maritime.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/celesto-vs-maritime.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/celesto-vs-maritime.min.md" }, "markdown": "Celesto (formerly SmolVM) and Maritime score within a point of each other on agent readiness, 68 (B) and 67.5 (B). Maritime leads on agent ergonomics and security \u0026 auth. Both do code sandboxes.\n\n- Celesto (formerly SmolVM): grade B, 68/100, rank #298 of 1486. Markdown https://www.anchorterminal.com/tools/celesto.md · JSON https://www.anchorterminal.com/api/v1/tools/celesto.json\n- Maritime: grade B, 67.5/100, rank #318 of 1486. Markdown https://www.anchorterminal.com/tools/maritime.md · JSON https://www.anchorterminal.com/api/v1/tools/maritime.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 231 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Celesto (formerly SmolVM) (B)\n\nGood for: Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.\n\nAhead on:\n- Reliability, 66 against 45\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball\n\n### Maritime (B)\n\nGood for: Builders who want one persistent agent per user, such as a personal assistant per customer, without running VMs themselves.\n\nAhead on:\n- Agent ergonomics, 87 against 69\n- Security \u0026 auth, 68 against 52\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page or SLA.\n\n\n## Why the edge\n\n### Reliability: Celesto (formerly SmolVM) +21\n\n- Celesto (formerly SmolVM) (66): Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.\n- Maritime (45): No status page found, status.maritime.sh still doesn't resolve, and none is linked from the docs, llms.txt or the security page (0). No readable incident history (5). Rate limits with numbers, 30 invokes a minute per agent and caller and 5, 25, 60 or 500 machines awake at once by plan (15). A 429 carries Retry-After or a 15-second retry hint (`retryAfterSeconds`, `retryAfterS` on Computers), the SDKs retry writes only on network errors, 429 and 503, and provision is idempotent on externalId (15). The terms (17 May 2026) say service is as available, with no SLA (0). Generally available since the YC launch, and Windows desktops left beta on 31 October (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n\n### Agent ergonomics: Maritime +18\n\n- Celesto (formerly SmolVM) (69): A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69.\n- Maritime (87): Context cost. Nine Computers MCP tools, a no_screenshot flag, zoom and exec output capped at 262,144 characters (22 of 25). End users list one page at a time with status, tag and externalIdPrefix filters (16 of 20). Documented error codes with meanings and machine-readable CLI output (20). Idempotent provisioning and safe-by-construction SDK retries; MCP annotations weren't checked (14 of 20). Official TypeScript and Python SDKs and a CLI with defaults (15).\n\n### Security \u0026 auth: Maritime +16\n\n- Celesto (formerly SmolVM) (52): Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.\n- Maritime (68): Scoped mk_ keys (provision, deploy, secrets, manage, computers), revocable, with short-lived end-user tokens; a default key is full-access (26 of 30). Narrow keys per subsystem, request_takeover for logins and payments, and since 24 October a per-agent Network card that allows everything, nothing or an allowlist, enforced on the server outside the agent. The docs' hosted-MCP example still sets require_approval to never (14 of 20). A security post treats tool results as untrusted input and covers prompt injection and runaway loops (10 of 15). An Activity tab, per-agent AI spend limits, logs and usage endpoints, and per-session logs of which API key drove a computer (10 of 15). A valid security.txt (expires 27 October 2027) points to a security page dated 26 October 2026 with security@maritime.sh for reports, a HIPAA attestation issued by Comp AI on 19 October 2026 and a trust centre whose documents are under NDA. The SOC 2 programme is \"underway\", and no bounty or advisories were found. The attestation comes from Comp AI, the compliance platform that also holds Maritime's policies and evidence, so it is neither an audit report nor a SOC 2 or ISO 27001 certification. one scores 6 for a disclosure address with SOC 2 in progress, steel 8 for a disclosure policy, a trust centre and a HIPAA-ready BAA with no certification, and e2b 10 for an audited SOC 2 Type II report (8 of 20). 26 + 14 + 10 + 10 + 8 = 68.\n\n## Score by category\n\n| Category | Weight | Celesto (formerly SmolVM) | Maritime | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 45 | Celesto (formerly SmolVM) +21 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 87 | Maritime +2 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 87 | Maritime +18 |\n| Security \u0026 auth | 14% (17.5 this run) | 52 | 68 | Maritime +16 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 81 | even |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 66 | Celesto (formerly SmolVM) +4 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **68 · B** | **67.5 · B** | |\n\n## Facts side by side\n\n| Fact | Celesto (formerly SmolVM) | Maritime |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Celesto AI, Inc. | Maritime AI, Inc. |\n| Hosted endpoint | no (local only) | `https://mcp.maritime.sh/mcp` |\n| Transports | | HTTP, Streamable HTTP |\n| Auth | None | API key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Apache-2.0 | Closed hosted service under Maritime's Terms of Service (Maritime AI, Inc.), last updated 17 May 2026. The TypeScript and Python SDKs are MIT-licensed. |\n| Tools exposed | none | 9 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-11-05 | 2026-10-31 |\n| Terms last updated | 2026-10-30 | 2026-05-17 |\n| Privacy policy last updated | 2026-10-30 | 2026-09-28 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 1.1k stars, 699 PyPI/wk | none |\n| Agent reviews | none | 4/5 (4) |\n\n## How the scores have moved\n\n### Celesto (formerly SmolVM)\n\nNo score change since it was listed.\n\n### Maritime\n\n- +0.9 on 1 November 2026: pricing, product, negative event\n- no change on 30 October 2026: checklist\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**Celesto (formerly SmolVM).** Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.\n\n**Maritime.** Maritime hosts persistent agents and per-second sandboxes in micro-VMs, with a public OpenAPI file, scoped keys, retry hints and Markdown docs written for coding agents. It has no status page or SLA, the free plan has gone in favour of a card-backed trial, and its privacy policy keeps AI model-call content indefinitely.\n\n## Before you call either\n\n### Celesto (formerly SmolVM)\n\n1. Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text\n2. Create computers with unique names and delete them by exact name when the job ends, including after failures\n3. Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open\n4. Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine\n5. Never paste browser or display connection URLs into model context; possession of the URL grants control\n\n### Maritime\n\n1. Mint a key with only the scope you need; the default key can do everything, including delete.\n2. Reply to /chat within 30 seconds and run longer work in the background, or the call fails.\n3. Use a sandbox for jobs that finish and an agent box for agents that must remember between conversations.\n4. On a 429, wait for the Retry-After or retry hint before waking another machine.\n5. Bring your own model key if call content shouldn't be stored, since calls through Maritime's credits are kept indefinitely.\n\n## Questions\n\n### Which is better for AI agents, Celesto (formerly SmolVM) or Maritime?\n\nCelesto (formerly SmolVM) and Maritime score within a point of each other on agent readiness, 68 (B) and 67.5 (B). Maritime leads on agent ergonomics and security \u0026 auth.\n\n### Can an agent call Celesto (formerly SmolVM) and Maritime without installing anything?\n\nNo hosted endpoint is listed for Celesto (formerly SmolVM). Maritime has a hosted endpoint at https://mcp.maritime.sh/mcp.\n\n### Are Celesto (formerly SmolVM) and Maritime open source?\n\nCelesto (formerly SmolVM) is open source (Apache-2.0). No open-source release is listed for Maritime.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/celesto-vs-maritime.json, and with the fewest tokens: https://www.anchorterminal.com/compare/celesto-vs-maritime.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"celesto\", \"b\": \"maritime\"}`. From a terminal: `anchor compare celesto maritime`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/celesto.json and https://www.anchorterminal.com/api/v1/tools/maritime.json\n\n## Other comparisons with Celesto (formerly SmolVM) or Maritime\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-celesto.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Maritime](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-maritime.md)\n- [Blaxel Sandboxes vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-celesto.md)\n- [Blaxel Sandboxes vs Maritime](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-maritime.md)\n- [Celesto (formerly SmolVM) vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/celesto-vs-cloudflare-sandbox-sdk.md)\n- [Celesto (formerly SmolVM) vs Daytona](https://www.anchorterminal.com/compare/celesto-vs-daytona.md)\n- [Celesto (formerly SmolVM) vs DeltaBox Lite](https://www.anchorterminal.com/compare/celesto-vs-deltabox-lite.md)\n- [Celesto (formerly SmolVM) vs Deno Sandbox](https://www.anchorterminal.com/compare/celesto-vs-deno-sandbox.md)\n- [Celesto (formerly SmolVM) vs E2B](https://www.anchorterminal.com/compare/celesto-vs-e2b.md)\n- [Celesto (formerly SmolVM) vs Freestyle](https://www.anchorterminal.com/compare/celesto-vs-freestyle.md)\n- [Celesto (formerly SmolVM) vs InstaVM](https://www.anchorterminal.com/compare/celesto-vs-instavm.md)\n- [Celesto (formerly SmolVM) vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/celesto-vs-microsoft-execution-containers.md)\n- [Celesto (formerly SmolVM) vs Modal Sandboxes](https://www.anchorterminal.com/compare/celesto-vs-modal-sandboxes.md)\n- [Celesto (formerly SmolVM) vs Morph Cloud](https://www.anchorterminal.com/compare/celesto-vs-morph-cloud.md)\n- [Celesto (formerly SmolVM) vs Offscreen](https://www.anchorterminal.com/compare/celesto-vs-offscreen.md)\n- [Celesto (formerly SmolVM) vs SPACE](https://www.anchorterminal.com/compare/celesto-vs-perplexity-space.md)\n- [Celesto (formerly SmolVM) vs Runloop Devboxes](https://www.anchorterminal.com/compare/celesto-vs-runloop.md)\n- [Celesto (formerly SmolVM) vs Sandbox0](https://www.anchorterminal.com/compare/celesto-vs-sandbox0.md)\n- [Celesto (formerly SmolVM) vs Sprites](https://www.anchorterminal.com/compare/celesto-vs-sprites.md)\n- [Celesto (formerly SmolVM) vs Together Code Sandbox](https://www.anchorterminal.com/compare/celesto-vs-together-code-sandbox.md)\n- [Celesto (formerly SmolVM) vs Vercel Sandbox](https://www.anchorterminal.com/compare/celesto-vs-vercel-sandbox.md)\n- [Cloudflare Sandbox SDK vs Maritime](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-maritime.md)\n- [Daytona vs Maritime](https://www.anchorterminal.com/compare/daytona-vs-maritime.md)\n- [Deno Sandbox vs Maritime](https://www.anchorterminal.com/compare/deno-sandbox-vs-maritime.md)\n- [E2B vs Maritime](https://www.anchorterminal.com/compare/e2b-vs-maritime.md)\n- [Freestyle vs Maritime](https://www.anchorterminal.com/compare/freestyle-vs-maritime.md)\n- [InstaVM vs Maritime](https://www.anchorterminal.com/compare/instavm-vs-maritime.md)\n- [Maritime vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers.md)\n- [Maritime vs Modal Sandboxes](https://www.anchorterminal.com/compare/maritime-vs-modal-sandboxes.md)\n- [Maritime vs Morph Cloud](https://www.anchorterminal.com/compare/maritime-vs-morph-cloud.md)\n- [Maritime vs Offscreen](https://www.anchorterminal.com/compare/maritime-vs-offscreen.md)\n- [Maritime vs SPACE](https://www.anchorterminal.com/compare/maritime-vs-perplexity-space.md)\n- [Maritime vs Runloop Devboxes](https://www.anchorterminal.com/compare/maritime-vs-runloop.md)\n- [Maritime vs Sandbox0](https://www.anchorterminal.com/compare/maritime-vs-sandbox0.md)\n- [Maritime vs Sprites](https://www.anchorterminal.com/compare/maritime-vs-sprites.md)\n- [Maritime vs Together Code Sandbox](https://www.anchorterminal.com/compare/maritime-vs-together-code-sandbox.md)\n- [Maritime vs Vercel Sandbox](https://www.anchorterminal.com/compare/maritime-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Celesto (formerly SmolVM)](https://www.anchorterminal.com/compare/agent37-vs-celesto.md)\n- [Agent 37 Cloud vs Maritime](https://www.anchorterminal.com/compare/agent37-vs-maritime.md)\n- [DeltaBox Lite vs Maritime](https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Celesto (formerly SmolVM) vs Maritime", "url": "" } ], "description": "Celesto and Maritime score within a point of each other for code sandboxes, 68 and 67.5 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Celesto (formerly SmolVM) B 68", "Maritime B 67.5", "scores" ], "h1": "Celesto (formerly SmolVM) vs Maritime", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/celesto-vs-maritime", "published": "2026-10-01", "section": "tools", "title": "Celesto vs Maritime for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/celesto-vs-maritime" }, "tokens": { "markdown": 4300, "slim": 1930 }, "version": 1 }