{ "data": { "a": { "slug": "cloudflare-sandbox-sdk", "name": "Cloudflare Sandbox SDK", "vendor": "Cloudflare", "vendorUrl": "https://developers.cloudflare.com/sandbox/", "kind": "sdk", "category": "code-sandboxes", "summary": "TypeScript library for running sandboxed Linux containers from a Cloudflare Worker.", "url": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json", "repo": "https://github.com/cloudflare/sandbox-sdk", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@cloudflare/sandbox" } ], "auth": "none", "authNotes": "There's no hosted API. The sandbox sits behind a Worker you deploy, so it has whatever auth you put in front of it, and the starter template has none. Deploying needs a Cloudflare account through Wrangler. Version 1.0 adds preview ports with custom hostnames and authentication.", "pricing": "paid", "pricingNotes": "Needs the Workers Paid plan, $5 a month minimum (https://developers.cloudflare.com/workers/platform/pricing/). Billed as Containers plus Workers and Durable Objects. Containers include 25 GiB-hours of memory, 375 vCPU-minutes and 200 GB-hours of disk a month, then $0.0000025 a GiB-second of memory, $0.000020 a vCPU-second of CPU used and $0.00000007 a GB-second of disk, in 10 ms steps while the container runs. Egress is $0.025 a GB in North America and Europe after 1 TB (https://developers.cloudflare.com/containers/pricing/). Durable Objects add $0.15 per million requests and $12.50 per million GB-seconds after the included amounts (https://developers.cloudflare.com/workers/platform/pricing/).", "priceSummary": "$0.072 / vCPU-hr", "where": "local", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1100, "npmWeekly": 722733, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.cloudflare.com/sandbox/", "llmsTxt": "https://developers.cloudflare.com/sandbox/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "typescript", "open-source", "llms-txt" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.5, "grade": "B", "agentReady": false, "rank": 273, "ranked": true, "rankOf": 1133, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "bestFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "strengths": [ "Each sandbox runs in its own VM with a separate filesystem, process space and network stack", "Outbound handlers hold credentials in the Worker and inject them, so the container never sees them", "Egress can be turned off or limited to a deny-by-default `allowedHosts` list", "CPU billed on use at $0.000020 a vCPU-second, with a monthly allowance on Workers Paid", "Apache-2.0, with CodeQL and passing CI on main" ], "weaknesses": [ "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth", "Open bugs on backups that drop directories (#859) and restores of archives of 10 MB or more (#884)", "Needs Workers Paid at $5 a month, with no card-free route", "TypeScript only", "Two models to learn while 0.x and 1.0 overlap until 31 December 2026" ], "agentNotes": [ "Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets", "Put API keys in an outbound handler in the Worker, not in the container's environment", "Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default", "Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs", "Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.5 } ], "editorialScores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 45 }, "provenanceScore": 94 }, "connect": { "install": "npm create cloudflare@latest -- my-sandbox --template=cloudflare/sandbox-sdk/examples/minimal" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/cloudflare-sandbox-sdk" }, "sameCompany": [ "cloudflare-ai-gateway", "cloudflare-workers-ai", "cloudflare-web-search", "cloudflare-ai-search", "cloudflare-cli", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "area": "agent-runtime", "unitPrices": [ { "item": "Container CPU", "unit": "vcpu-hour", "usd": 0.072, "note": "$0.000020 a vCPU-second of CPU used, after 375 vCPU-minutes a month" }, { "item": "Workers Paid plan", "unit": "month", "usd": 5, "note": "Minimum charge" }, { "item": "Egress, North America and Europe", "unit": "gb", "usd": 0.025, "note": "After 1 TB a month" } ], "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": null, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://developers.cloudflare.com/changelog/?product=sandbox", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The self-serve subscription agreement (updated 12 September 2025) names Cloudflare, Inc., 101 Townsend St., San Francisco.", "There's no vendor endpoint to check. Sandboxes are reached through a Worker on your own route or workers.dev subdomain.", "security.txt lists HackerOne and a disclosure policy, but we didn't see an Expires field.", "The GitHub README still says the SDK is in active development and APIs may change before v1.0, while npm has 1.0.0 (published 2026-09-30) and the changelog announces 1.0. The GitHub releases page showed 0.12.4 (21 July 2026) as its newest release when checked." ], "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.json", "live": { "slug": "cloudflare-sandbox-sdk", "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-18T00:31:04.743899281Z" }, "versions": [ { "registry": "github", "name": "cloudflare/sandbox-sdk", "version": "@cloudflare/sandbox@1.0.1", "released": "2026-10-13", "seenAt": "2026-10-17T01:40:56.551288358Z" }, { "registry": "npm", "name": "@cloudflare/sandbox", "version": "1.0.1", "seenAt": "2026-10-17T01:40:55.688563051Z" } ], "githubStars": 1151, "npmWeekly": 672754, "securityTxt": { "url": "https://cloudflare.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-17T15:52:10.791371758Z" }, "llmsTxt": { "url": "https://developers.cloudflare.com/sandbox/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:21:51.135451061Z" }, "domain": { "domain": "cloudflare.com", "registered": "2009-02-17", "source": "https://rdap.verisign.com/com/v1/domain/cloudflare.com", "checkedAt": "2026-10-11T13:20:21.49951473Z" }, "pages": [ { "url": "https://developers.cloudflare.com/changelog/?product=sandbox", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-17T22:59:26.520943711Z", "changedAt": "2026-10-17T22:48:12.146565914Z", "fingerprint": "f1dd13b009bc" }, { "url": "https://developers.cloudflare.com/containers/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T22:59:38.530612876Z", "changedAt": "2026-10-06T16:07:26.756927967Z", "fingerprint": "f742d2e03f78" }, { "url": "https://developers.cloudflare.com/workers/platform/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-16T22:20:45.228619459Z", "changedAt": "2026-10-16T22:20:45.228619459Z", "fingerprint": "fa680c96ce62" } ], "updatedAt": "2026-10-18T00:31:04.743899281Z" } }, "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 5 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.", "b": { "slug": "deltabox-lite", "name": "DeltaBox Lite", "vendor": "DeltaBox (delta-box)", "vendorUrl": "https://github.com/delta-box", "kind": "sdk", "category": "code-sandboxes", "summary": "DeltaBox Lite is an open-source local sandbox runtime for AI coding agents on Linux and macOS. Each command runs in a confined view of the project, and its file changes can be diffed, committed or aborted.", "url": "https://www.anchorterminal.com/tools/deltabox-lite", "markdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json", "repo": "https://github.com/delta-box/deltabox-lite", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "deltabox-lite" } ], "auth": "none", "authNotes": "No account, key or sign-in. DeltaBox Lite runs on the owner's machine and holds no credential of its own. Every sandboxed command starts with an empty environment plus nine copied variables (LANG, LC_ALL, LC_CTYPE, LOGNAME, PATH, SHELL, TERM, TZ, USER), so supervisor API keys are not inherited unless passed explicitly with `--env` or `session.exec.env` (https://github.com/delta-box/deltabox-lite/blob/main/docs/policy.md).", "pricing": "free", "pricingNotes": "Free. Apache-2.0 software that installs from npm, Homebrew or GitHub release tarballs with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine (checked 2026-10-17).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source. Local open-source software with no paid endpoint (checked 2026-10-17).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/delta-box/deltabox-lite/blob/main/README.md", "capabilities": [ "sandbox.fs", "sandbox.code", "sandbox.persist" ], "tags": [ "open-source", "local", "free", "no-auth", "no-card", "apache-2.0", "rust", "cli", "json-rpc", "linux", "macos", "pre-1.0", "new" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 52.3, "grade": "D", "agentReady": false, "rank": 825, "ranked": true, "rankOf": 1133, "categoryRank": 15, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "bestFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "strengths": [ "Apache-2.0, free and local, installing from npm, Homebrew or checksummed release tarballs for Linux and macOS on x64 and arm64", "Every command's file changes can be diffed, committed or aborted, with a checkpoint chain and conflict-checked commits", "Sandboxed commands start with an empty environment plus nine named variables, and common secret paths such as `.env`, `.ssh` and `*.pem` are denied by default", "One-line transactions (`deltabox run --commit` or `--abort`) and a line-delimited JSON-RPC protocol over stdio with 15 methods", "No telemetry or analytics calls were found in the source" ], "weaknesses": [ "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration", "The default network mode `allow_audit` permits unrestricted networking, and no network audit log was found in the source", "The agent install prompt tells the agent it can star the repository through the user's authenticated GitHub CLI", "The only CI workflow builds release binaries and runs `--version` smoke checks on tags. The 288 test functions in the repository are not run in CI", "No SECURITY.md, security.txt or disclosure policy was found" ], "agentNotes": [ "Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.", "Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.", "Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.", "Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.", "Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.3 } ], "editorialScores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 52 }, "provenanceScore": 27 }, "connect": { "install": "npm install --global deltabox-lite", "headless": { "abort": "deltabox run --abort -- sh -c 'printf \"sandboxed\\n\" \u003e\u003e notes.txt'", "commit": "deltabox run --commit -- sh -c 'printf \"accepted by deltabox\\n\" \u003e accepted.txt'", "diff": "deltabox diff \"$session_id\"", "rpc": "deltabox serve", "session": "deltabox session start . --json" } }, "letme": { "capability": "https://letme.dev/sandbox.fs", "tool": "https://letme.dev/deltabox-lite" }, "area": "agent-runtime", "provenance": { "legalEntity": "", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/delta-box/deltabox-lite/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "No legal entity is named in the repository, the licence or the npm records. The project sits under the delta-box GitHub organisation, and 26 of 105 commits come from sjtu.edu.cn addresses. The npm packages are published by the account xeonliu.", "The project has no website, terms or privacy policy. The README and the docs folder are the only documentation.", "The repository has no SECURITY.md, and there is no project domain to hold a security.txt.", "The software runs on the owner's machine, so there is no vendor endpoint or status page to check." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deltabox-lite.json", "live": { "slug": "deltabox-lite", "pages": [ { "url": "https://raw.githubusercontent.com/delta-box/deltabox-lite/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:09:46.794533554Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0d8c10328fc8" } ], "updatedAt": "2026-10-17T23:09:46.794533554Z" } }, "facts": [ { "a": "SDK + MCP", "b": "SDK + MCP", "name": "Kind" }, { "a": "Cloudflare", "b": "DeltaBox (delta-box)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-10-14", "name": "Last release" }, { "a": "2025-09-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "1.1k stars, 723k npm/wk", "b": "none", "name": "Popularity" }, { "a": "3/5 (2)", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 5 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Cloudflare Sandbox SDK or DeltaBox Lite?" }, { "answer": "Yes. Cloudflare Sandbox SDK is open source (Apache-2.0). DeltaBox Lite is open source (Apache-2.0).", "question": "Are Cloudflare Sandbox SDK and DeltaBox Lite open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 87 against 37", "Schema \u0026 documentation, 77 against 68", "Security \u0026 auth, 65 against 47", "Maintenance \u0026 community, 70 against 43", "Transparency \u0026 trust, 70 against 40" ], "also": null, "goodFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "slug": "cloudflare-sandbox-sdk", "watchFor": "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth" }, { "aheadOn": [ "Payments \u0026 pricing, 60 against 30" ], "also": [ "Free to start without a card" ], "goodFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "slug": "deltabox-lite", "watchFor": "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.json", "title": "Blaxel Sandboxes vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.json", "title": "Blaxel Sandboxes vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.json", "title": "Cloudflare Sandbox SDK vs Daytona", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.json", "title": "Cloudflare Sandbox SDK vs E2B", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.json", "title": "Cloudflare Sandbox SDK vs Freestyle", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.json", "title": "Cloudflare Sandbox SDK vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.json", "title": "Cloudflare Sandbox SDK vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.json", "title": "Cloudflare Sandbox SDK vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.json", "title": "Cloudflare Sandbox SDK vs Offscreen", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.json", "title": "Cloudflare Sandbox SDK vs SPACE", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.json", "title": "Cloudflare Sandbox SDK vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.json", "title": "Cloudflare Sandbox SDK vs Sprites", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.json", "title": "Cloudflare Sandbox SDK vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.json", "title": "Cloudflare Sandbox SDK vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.json", "title": "Daytona vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.json", "title": "Agent 37 Cloud vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.json", "title": "Agent 37 Cloud vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json", "title": "DeltaBox Lite vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.json", "title": "DeltaBox Lite vs E2B", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.json", "title": "DeltaBox Lite vs Freestyle", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json", "title": "DeltaBox Lite vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.json", "title": "DeltaBox Lite vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.json", "title": "DeltaBox Lite vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.json", "title": "DeltaBox Lite vs SPACE", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.json", "title": "DeltaBox Lite vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.json", "title": "DeltaBox Lite vs Sprites", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.json", "title": "DeltaBox Lite vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.json", "title": "DeltaBox Lite vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox" } ], "scores": [ { "by": 50, "cloudflare-sandbox-sdk": 87, "deltabox-lite": 37, "edge": "cloudflare-sandbox-sdk", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 9, "cloudflare-sandbox-sdk": 77, "deltabox-lite": 68, "edge": "cloudflare-sandbox-sdk", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 4, "cloudflare-sandbox-sdk": 63, "deltabox-lite": 67, "edge": "deltabox-lite", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 18, "cloudflare-sandbox-sdk": 65, "deltabox-lite": 47, "edge": "cloudflare-sandbox-sdk", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 30, "cloudflare-sandbox-sdk": 30, "deltabox-lite": 60, "edge": "deltabox-lite", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 27, "cloudflare-sandbox-sdk": 70, "deltabox-lite": 43, "edge": "cloudflare-sandbox-sdk", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 30, "cloudflare-sandbox-sdk": 70, "deltabox-lite": 40, "edge": "cloudflare-sandbox-sdk", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 5 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing. Both do code sandboxes.", "tutorials": [], "verdicts": { "cloudflare-sandbox-sdk": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "deltabox-lite": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite", "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.min.md" }, "markdown": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 5 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing. Both do code sandboxes.\n\n- Cloudflare Sandbox SDK: grade B, 67.5/100, rank #273 of 1133. Markdown https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json\n- DeltaBox Lite: grade D, 52.3/100, rank #825 of 1133. Markdown https://www.anchorterminal.com/tools/deltabox-lite.md · JSON https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 153 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Cloudflare Sandbox SDK (B)\n\nGood for: Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.\n\nAhead on:\n- Reliability, 87 against 37\n- Schema \u0026 documentation, 77 against 68\n- Security \u0026 auth, 65 against 47\n- Maintenance \u0026 community, 70 against 43\n- Transparency \u0026 trust, 70 against 40\n\nWatch for: No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth\n\n### DeltaBox Lite (D)\n\nGood for: A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 30\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration\n\n\n## Score by category\n\n| Category | Weight | Cloudflare Sandbox SDK | DeltaBox Lite | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 87 | 37 | Cloudflare Sandbox SDK +50 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 68 | Cloudflare Sandbox SDK +9 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 67 | DeltaBox Lite +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 65 | 47 | Cloudflare Sandbox SDK +18 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | DeltaBox Lite +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 43 | Cloudflare Sandbox SDK +27 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 40 | Cloudflare Sandbox SDK +30 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **67.5 · B** | **52.3 · D** | |\n\n## Facts side by side\n\n| Fact | Cloudflare Sandbox SDK | DeltaBox Lite |\n| --- | --- | --- |\n| Kind | SDK + MCP | SDK + MCP |\n| Vendor | Cloudflare | DeltaBox (delta-box) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-30 | 2026-10-14 |\n| Terms last updated | 2025-09-12 | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 1.1k stars, 723k npm/wk | none |\n| Agent reviews | 3/5 (2) | 2.8/5 (4) |\n\n## Verdicts\n\n**Cloudflare Sandbox SDK.** Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.\n\n**DeltaBox Lite.** DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.\n\n## Before you call either\n\n### Cloudflare Sandbox SDK\n\n1. Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets\n2. Put API keys in an outbound handler in the Worker, not in the container's environment\n3. Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default\n4. Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs\n5. Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026\n\n### DeltaBox Lite\n\n1. Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.\n2. Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.\n3. Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.\n4. Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.\n5. Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation.\n\n## Questions\n\n### Which is better for AI agents, Cloudflare Sandbox SDK or DeltaBox Lite?\n\nCloudflare Sandbox SDK scores 67.5 (B) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 5 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.\n\n### Are Cloudflare Sandbox SDK and DeltaBox Lite open source?\n\nYes. Cloudflare Sandbox SDK is open source (Apache-2.0). DeltaBox Lite is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cloudflare-sandbox-sdk\", \"b\": \"deltabox-lite\"}`. From a terminal: `anchor compare cloudflare-sandbox-sdk deltabox-lite`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json and https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json\n\n## Other comparisons with Cloudflare Sandbox SDK or DeltaBox Lite\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Blaxel Sandboxes vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.md)\n- [Blaxel Sandboxes vs DeltaBox Lite](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.md)\n- [Cloudflare Sandbox SDK vs Daytona](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs E2B](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.md)\n- [Cloudflare Sandbox SDK vs Freestyle](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.md)\n- [Cloudflare Sandbox SDK vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.md)\n- [Cloudflare Sandbox SDK vs Modal Sandboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.md)\n- [Cloudflare Sandbox SDK vs Morph Cloud](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.md)\n- [Cloudflare Sandbox SDK vs Offscreen](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.md)\n- [Cloudflare Sandbox SDK vs SPACE](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.md)\n- [Cloudflare Sandbox SDK vs Runloop Devboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.md)\n- [Cloudflare Sandbox SDK vs Sprites](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.md)\n- [Cloudflare Sandbox SDK vs Together Code Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.md)\n- [Cloudflare Sandbox SDK vs Vercel Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.md)\n- [Daytona vs DeltaBox Lite](https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.md)\n- [Agent 37 Cloud vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.md)\n- [Agent 37 Cloud vs DeltaBox Lite](https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.md)\n- [DeltaBox Lite vs Deno Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.md)\n- [DeltaBox Lite vs E2B](https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.md)\n- [DeltaBox Lite vs Freestyle](https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.md)\n- [DeltaBox Lite vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.md)\n- [DeltaBox Lite vs Modal Sandboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.md)\n- [DeltaBox Lite vs Morph Cloud](https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n- [DeltaBox Lite vs SPACE](https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.md)\n- [DeltaBox Lite vs Runloop Devboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.md)\n- [DeltaBox Lite vs Sprites](https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.md)\n- [DeltaBox Lite vs Together Code Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.md)\n- [DeltaBox Lite vs Vercel Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cloudflare Sandbox SDK vs DeltaBox Lite", "url": "" } ], "description": "Cloudflare Sandbox SDK scores 67.5 (B) to DeltaBox Lite's 52.3 (D) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Cloudflare Sandbox SDK B 67.5", "DeltaBox Lite D 52.3", "scores" ], "h1": "Cloudflare Sandbox SDK vs DeltaBox Lite", "image": "https://www.anchorterminal.com/assets/og/compare-cloudflare-sandbox-sdk-vs-deltabox-lite.png", "path": "/compare/cloudflare-sandbox-sdk-vs-deltabox-lite", "published": "2026-10-01", "section": "tools", "title": "Cloudflare Sandbox SDK vs DeltaBox Lite for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite" }, "tokens": { "markdown": 2750, "slim": 630 }, "version": 1 }