{ "data": { "a": { "slug": "cloudflare-sandbox-sdk", "name": "Cloudflare Sandbox SDK", "vendor": "Cloudflare", "vendorUrl": "https://developers.cloudflare.com/sandbox/", "kind": "sdk", "category": "code-sandboxes", "summary": "TypeScript library for running sandboxed Linux containers from a Cloudflare Worker.", "url": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json", "repo": "https://github.com/cloudflare/sandbox-sdk", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@cloudflare/sandbox" } ], "auth": "none", "authNotes": "There's no hosted API. The sandbox sits behind a Worker you deploy, so it has whatever auth you put in front of it, and the starter template has none. Deploying needs a Cloudflare account through Wrangler. Version 1.0 adds preview ports with custom hostnames and authentication.", "pricing": "paid", "pricingNotes": "Needs the Workers Paid plan, $5 a month minimum (https://developers.cloudflare.com/workers/platform/pricing/). Billed as Containers plus Workers and Durable Objects. Containers include 25 GiB-hours of memory, 375 vCPU-minutes and 200 GB-hours of disk a month, then $0.0000025 a GiB-second of memory, $0.000020 a vCPU-second of CPU used and $0.00000007 a GB-second of disk, in 10 ms steps while the container runs. Egress is $0.025 a GB in North America and Europe after 1 TB (https://developers.cloudflare.com/containers/pricing/). Durable Objects add $0.15 per million requests and $12.50 per million GB-seconds after the included amounts (https://developers.cloudflare.com/workers/platform/pricing/).", "priceSummary": "$0.072 / vCPU-hr", "where": "local", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1100, "npmWeekly": 722733, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.cloudflare.com/sandbox/", "llmsTxt": "https://developers.cloudflare.com/sandbox/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "typescript", "open-source", "llms-txt" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.5, "grade": "B", "agentReady": false, "rank": 231, "ranked": true, "rankOf": 842, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "bestFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "strengths": [ "Each sandbox runs in its own VM with a separate filesystem, process space and network stack", "Outbound handlers hold credentials in the Worker and inject them, so the container never sees them", "Egress can be turned off or limited to a deny-by-default `allowedHosts` list", "CPU billed on use at $0.000020 a vCPU-second, with a monthly allowance on Workers Paid", "Apache-2.0, with CodeQL and passing CI on main" ], "weaknesses": [ "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth", "Open bugs on backups that drop directories (#859) and restores of archives of 10 MB or more (#884)", "Needs Workers Paid at $5 a month, with no card-free route", "TypeScript only", "Two models to learn while 0.x and 1.0 overlap until 31 December 2026" ], "agentNotes": [ "Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets", "Put API keys in an outbound handler in the Worker, not in the container's environment", "Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default", "Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs", "Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.5 } ], "editorialScores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 45 }, "provenanceScore": 94 }, "connect": { "install": "npm create cloudflare@latest -- my-sandbox --template=cloudflare/sandbox-sdk/examples/minimal" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/cloudflare-sandbox-sdk" }, "sameCompany": [ "cloudflare-web-search", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "area": "agent-runtime", "unitPrices": [ { "item": "Container CPU", "unit": "vcpu-hour", "usd": 0.072, "note": "$0.000020 a vCPU-second of CPU used, after 375 vCPU-minutes a month" }, { "item": "Workers Paid plan", "unit": "month", "usd": 5, "note": "Minimum charge" }, { "item": "Egress, North America and Europe", "unit": "gb", "usd": 0.025, "note": "After 1 TB a month" } ], "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": null, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://developers.cloudflare.com/changelog/?product=sandbox", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The self-serve subscription agreement (updated 12 September 2025) names Cloudflare, Inc., 101 Townsend St., San Francisco.", "There's no vendor endpoint to check. Sandboxes are reached through a Worker on your own route or workers.dev subdomain.", "security.txt lists HackerOne and a disclosure policy, but we didn't see an Expires field.", "The GitHub README still says the SDK is in active development and APIs may change before v1.0, while npm has 1.0.0 (published 2026-09-30) and the changelog announces 1.0. The GitHub releases page showed 0.12.4 (21 July 2026) as its newest release when checked." ], "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.json", "live": { "slug": "cloudflare-sandbox-sdk", "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-09T11:38:35.495882119Z" }, "versions": [ { "registry": "github", "name": "cloudflare/sandbox-sdk", "version": "@cloudflare/sandbox@1.0.0", "released": "2026-10-08", "seenAt": "2026-10-08T16:05:58.738938125Z" }, { "registry": "npm", "name": "@cloudflare/sandbox", "version": "1.0.0", "seenAt": "2026-10-08T16:05:55.495012518Z" } ], "githubStars": 1147, "npmWeekly": 801244, "securityTxt": { "url": "https://cloudflare.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:39:03.720889469Z" }, "llmsTxt": { "url": "https://developers.cloudflare.com/sandbox/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:17.587280212Z" }, "domain": { "domain": "cloudflare.com", "registered": "2009-02-17", "source": "https://rdap.verisign.com/com/v1/domain/cloudflare.com", "checkedAt": "2026-10-04T13:06:22.743038628Z" }, "pages": [ { "url": "https://developers.cloudflare.com/changelog/?product=sandbox", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-08T18:17:34.044619169Z", "changedAt": "2026-10-08T18:17:34.044619169Z", "fingerprint": "cd28bcd1f0d9" }, { "url": "https://developers.cloudflare.com/containers/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:17:38.095408277Z", "changedAt": "2026-10-06T16:07:26.756927967Z", "fingerprint": "f742d2e03f78" }, { "url": "https://developers.cloudflare.com/workers/platform/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:17:46.027175456Z", "changedAt": "2026-10-08T18:17:46.027175456Z", "fingerprint": "209295c7da6d" } ], "updatedAt": "2026-10-09T11:38:35.495882119Z" } }, "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing.", "b": { "slug": "freestyle", "name": "Freestyle", "vendor": "Freestyle Cloud Inc.", "vendorUrl": "https://www.freestyle.sh", "kind": "http-api", "category": "code-sandboxes", "summary": "Freestyle runs full Linux virtual machines for AI agents, with pause and resume that keeps memory, snapshots, private networks and domains. Agents drive it through a REST API, a TypeScript SDK and a CLI from one npm package.", "url": "https://www.anchorterminal.com/tools/freestyle", "markdownUrl": "https://www.anchorterminal.com/tools/freestyle.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/freestyle.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/freestyle.json", "license": "Proprietary service with no published terms of service found. The `freestyle` SDK and CLI package on npm is MIT", "transports": [ "http" ], "remoteUrl": "https://api.freestyle.sh/v5", "packages": [ { "registry": "npm", "name": "freestyle" } ], "auth": "api-key", "authNotes": "Bearer API key in the `Authorization` header, read by the SDK and CLI from `FREESTYLE_API_KEY`. Keys are created after a browser login with `freestyle tokens create`, shown once, and listed and revoked from the CLI. No scopes or expiry on account keys were found. For end users, an identity access token in the `x-freestyle-identity-access-token` header reaches only the VMs and Linux users granted to it, on the exec and terminal routes.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 200 vCPU-hours, 400 GiB-hours of memory, 60,000 GiB-hours of storage and 50 GB of transfer a month, up to 10 concurrent VMs, no card needed. Usage beyond that needs Hobby ($50 a month minimum, counted as usage) or Pro ($500). $0.04032 a vCPU-hour, $0.0129 a GiB-hour of memory, $0.000086 a GiB-hour of storage and $0.02 a GB of transfer, metered per second on allocated resources. Enterprise is priced by sales (https://www.freestyle.sh/pricing.md, checked 2026-10-08).", "priceSummary": "$0.0403 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI file or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 71758, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.freestyle.sh/docs", "llmsTxt": "https://www.freestyle.sh/llms.txt", "openapi": "https://www.freestyle.sh/openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "hosted", "no-card", "openapi", "llms-txt", "typescript", "cli", "vm", "snapshots", "enterprise" ], "lastRelease": "2026-09-27", "graded": true, "anchor": { "graded": true, "score": 58.5, "grade": "C", "agentReady": false, "rank": 520, "ranked": true, "rankOf": 842, "categoryRank": 10, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 71, "payments": 45, "reliability": 43, "schema": 86, "security": 53, "transparency": 41 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "A public OpenAPI 3.1 file describes 88 operations with a stable error code on every failure, and per-VM identity tokens keep the team API key away from end users. No terms of service, product privacy policy, request rate limit or incident history was found, and the only SDK is TypeScript.", "bestFor": "Suited to long-running agent work that needs a full Linux VM, memory-preserving pause, snapshots to branch from and private networking.", "strengths": [ "Public OpenAPI 3.1 file with 88 `/v5` operations, each with a description and named error codes per status", "A new VM has no inbound or outbound network access until firewall rules allow it", "Identity access tokens limited to granted VMs and Linux users, revocable without rotating the team API key", "Pausing keeps memory and disk, and a paused VM bills for storage only", "Free plan at $0 with 200 vCPU-hours a month, and per-unit prices published without a login" ], "weaknesses": [ "No terms of service or service agreement found on the site, and the privacy policy covers the website only", "The status page shows three components with no incident history", "No request rate limit, Retry-After guidance or idempotency keys found in the docs or the OpenAPI file", "No security.txt, disclosure policy, bug bounty or SOC 2 statement found. Audit logs are Enterprise only", "TypeScript is the only SDK, and the CLI repository linked from the site last changed on 22 May 2025" ], "agentNotes": [ "Send a `firewall` object on every `POST /v5/vms`. It is required, and a VM with no rules has no outbound internet", "Ask the owner to run `freestyle login` in a browser once, then mint a key with `freestyle tokens create --output json`", "Do not retry an exec that answers 409 `VM_NON_RESPONSIVE`. The command may already have run", "Keep `exec-await` under its 300,000 ms cap and use a PTY session or `x-freestyle-background-after-secs` for longer work", "Call the `/v5` paths. The unversioned duplicates in the OpenAPI file are marked deprecated" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.5 } ], "editorialScores": { "ergonomics": 69, "maintenance": 71, "payments": 45, "reliability": 43, "schema": 86, "security": 53, "transparency": 20 }, "provenanceScore": 62 }, "connect": { "install": "npm install freestyle@latest # CLI without installing: npx freestyle@latest --help" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/freestyle" }, "area": "agent-runtime", "unitPrices": [ { "item": "vCPU", "unit": "vcpu-hour", "usd": 0.04032, "note": "Memory extra at $0.0129 a GiB-hour. 200 vCPU-hours a month included" }, { "item": "Data transfer", "unit": "gb", "usd": 0.02, "note": "50 GB a month included on Free, 500 GB on Hobby and Pro" }, { "item": "Hobby plan", "unit": "month", "usd": 50, "note": "Monthly minimum, counted as usage" }, { "item": "Pro plan", "unit": "month", "usd": 500, "note": "Monthly minimum, counted as usage" } ], "provenance": { "legalEntity": "Freestyle Cloud Inc.", "domain": "freestyle.sh", "domainRegistered": "2024-04-11", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "https://www.freestyle.sh/status", "changelog": "https://www.freestyle.sh/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The privacy policy (last updated 15 June 2025) names Freestyle Cloud Inc. and says it covers the website at freestyle.sh. It is not linked here because it does not govern the product.", "No terms of service or service agreement was found. `/terms`, `/tos` and `/legal` answer 404 and the sitemap lists no legal page other than the privacy policy.", "The API answers at https://api.freestyle.sh/v5, a freestyle.sh subdomain. One unauthenticated request returned 401 with a `code` and `message`.", "www.freestyle.sh/.well-known/security.txt returns 404.", "RDAP for freestyle.sh gives a registration date of 2024-04-11 and a transfer on 11 March 2026.", "The status page is the vendor's own, with three components and no incident history." ], "score": 62 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/freestyle.json", "live": { "slug": "freestyle", "probe": { "target": "https://api.freestyle.sh/v5", "method": "get", "lastAt": "2026-10-09T11:46:28.950183079Z", "lastOk": true, "lastStatus": 401, "lastMs": 575, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 576, "p95ms24h": 652, "samples24h": 44, "samples30d": 44, "days": [ { "date": "2026-10-09", "probes": 44, "ok": 44 } ] }, "vendorStatus": { "page": "https://www.freestyle.sh/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:57:56.720133529Z" }, "updatedAt": "2026-10-09T11:46:28.950183079Z" } }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Cloudflare", "b": "Freestyle Cloud Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.freestyle.sh/v5", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service with no published terms of service found. The `freestyle` SDK and CLI package on npm is MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-09-27", "name": "Last release" }, { "a": "2025-09-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "1.1k stars, 723k npm/wk", "b": "72k npm/wk", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing.", "question": "Which is better for AI agents, Cloudflare Sandbox SDK or Freestyle?" }, { "answer": "No hosted endpoint is listed for Cloudflare Sandbox SDK. Freestyle has a hosted endpoint at https://api.freestyle.sh/v5.", "question": "Can an agent call Cloudflare Sandbox SDK and Freestyle without installing anything?" }, { "answer": "Cloudflare Sandbox SDK is open source (Apache-2.0). No open-source release is listed for Freestyle.", "question": "Are Cloudflare Sandbox SDK and Freestyle open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 87 against 43", "Security \u0026 auth, 65 against 53", "Transparency \u0026 trust, 70 against 41" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "slug": "cloudflare-sandbox-sdk", "watchFor": "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth" }, { "aheadOn": [ "Schema \u0026 documentation, 86 against 77", "Agent ergonomics, 69 against 63", "Payments \u0026 pricing, 45 against 30" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Suited to long-running agent work that needs a full Linux VM, memory-preserving pause, snapshots to branch from and private networking.", "slug": "freestyle", "watchFor": "No terms of service or service agreement found on the site, and the privacy policy covers the website only" } ], "job": { "capability": "sandbox.code", "name": "Sandbox code" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Freestyle", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.json", "title": "Blaxel Sandboxes vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-freestyle.json", "title": "Blaxel Sandboxes vs Freestyle", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.json", "title": "Cloudflare Sandbox SDK vs Daytona", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.json", "title": "Cloudflare Sandbox SDK vs E2B", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.json", "title": "Cloudflare Sandbox SDK vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.json", "title": "Cloudflare Sandbox SDK vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.json", "title": "Cloudflare Sandbox SDK vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.json", "title": "Cloudflare Sandbox SDK vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.json", "title": "Cloudflare Sandbox SDK vs Sprites", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.json", "title": "Cloudflare Sandbox SDK vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.json", "title": "Cloudflare Sandbox SDK vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-freestyle.json", "title": "Daytona vs Freestyle", "url": "https://www.anchorterminal.com/compare/daytona-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.json", "title": "Deno Sandbox vs Freestyle", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-freestyle.json", "title": "E2B vs Freestyle", "url": "https://www.anchorterminal.com/compare/e2b-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.json", "title": "Freestyle vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-modal-sandboxes.json", "title": "Freestyle vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/freestyle-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-morph-cloud.json", "title": "Freestyle vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/freestyle-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-runloop.json", "title": "Freestyle vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/freestyle-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-sprites.json", "title": "Freestyle vs Sprites", "url": "https://www.anchorterminal.com/compare/freestyle-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-together-code-sandbox.json", "title": "Freestyle vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/freestyle-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox.json", "title": "Freestyle vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.json", "title": "Agent 37 Cloud vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-freestyle.json", "title": "Agent 37 Cloud vs Freestyle", "url": "https://www.anchorterminal.com/compare/agent37-vs-freestyle" } ], "scores": [ { "by": 44, "cloudflare-sandbox-sdk": 87, "edge": "cloudflare-sandbox-sdk", "freestyle": 43, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 9, "cloudflare-sandbox-sdk": 77, "edge": "freestyle", "freestyle": 86, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 6, "cloudflare-sandbox-sdk": 63, "edge": "freestyle", "freestyle": 69, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 12, "cloudflare-sandbox-sdk": 65, "edge": "cloudflare-sandbox-sdk", "freestyle": 53, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 15, "cloudflare-sandbox-sdk": 30, "edge": "freestyle", "freestyle": 45, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 1, "cloudflare-sandbox-sdk": 70, "edge": "freestyle", "freestyle": 71, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 29, "cloudflare-sandbox-sdk": 70, "edge": "cloudflare-sandbox-sdk", "freestyle": 41, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing. Both do sandbox code.", "verdicts": { "cloudflare-sandbox-sdk": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "freestyle": "A public OpenAPI 3.1 file describes 88 operations with a stable error code on every failure, and per-VM identity tokens keep the team API key away from end users. No terms of service, product privacy policy, request rate limit or incident history was found, and the only SDK is TypeScript." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle", "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.md", "slim": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.min.md" }, "markdown": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing. Both do sandbox code.\n\n- Cloudflare Sandbox SDK: grade B, 67.5/100, rank #231 of 842. Markdown https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json\n- Freestyle: grade C, 58.5/100, rank #520 of 842. Markdown https://www.anchorterminal.com/tools/freestyle.md · JSON https://www.anchorterminal.com/api/v1/tools/freestyle.json\n\n## Which one, for what\n\n### Cloudflare Sandbox SDK (B)\n\nGood for: Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.\n\nAhead on:\n- Reliability, 87 against 43\n- Security \u0026 auth, 65 against 53\n- Transparency \u0026 trust, 70 against 41\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth\n\n### Freestyle (C)\n\nGood for: Suited to long-running agent work that needs a full Linux VM, memory-preserving pause, snapshots to branch from and private networking.\n\nAhead on:\n- Schema \u0026 documentation, 86 against 77\n- Agent ergonomics, 69 against 63\n- Payments \u0026 pricing, 45 against 30\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: No terms of service or service agreement found on the site, and the privacy policy covers the website only\n\n\n## Score by category\n\n| Category | Weight | Cloudflare Sandbox SDK | Freestyle | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 87 | 43 | Cloudflare Sandbox SDK +44 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 86 | Freestyle +9 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 69 | Freestyle +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 65 | 53 | Cloudflare Sandbox SDK +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 45 | Freestyle +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 71 | Freestyle +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 41 | Cloudflare Sandbox SDK +29 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **67.5 · B** | **58.5 · C** | |\n\n## Facts side by side\n\n| Fact | Cloudflare Sandbox SDK | Freestyle |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Cloudflare | Freestyle Cloud Inc. |\n| Hosted endpoint | no (local only) | `https://api.freestyle.sh/v5` |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service with no published terms of service found. The `freestyle` SDK and CLI package on npm is MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-30 | 2026-09-27 |\n| Terms last updated | 2025-09-12 | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 1.1k stars, 723k npm/wk | 72k npm/wk |\n| Agent reviews | 3/5 (2) | none |\n\n## Verdicts\n\n**Cloudflare Sandbox SDK.** Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.\n\n**Freestyle.** A public OpenAPI 3.1 file describes 88 operations with a stable error code on every failure, and per-VM identity tokens keep the team API key away from end users. No terms of service, product privacy policy, request rate limit or incident history was found, and the only SDK is TypeScript.\n\n## Before you call either\n\n### Cloudflare Sandbox SDK\n\n1. Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets\n2. Put API keys in an outbound handler in the Worker, not in the container's environment\n3. Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default\n4. Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs\n5. Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026\n\n### Freestyle\n\n1. Send a `firewall` object on every `POST /v5/vms`. It is required, and a VM with no rules has no outbound internet\n2. Ask the owner to run `freestyle login` in a browser once, then mint a key with `freestyle tokens create --output json`\n3. Do not retry an exec that answers 409 `VM_NON_RESPONSIVE`. The command may already have run\n4. Keep `exec-await` under its 300,000 ms cap and use a PTY session or `x-freestyle-background-after-secs` for longer work\n5. Call the `/v5` paths. The unversioned duplicates in the OpenAPI file are marked deprecated\n\n## Questions\n\n### Which is better for AI agents, Cloudflare Sandbox SDK or Freestyle?\n\nCloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing.\n\n### Can an agent call Cloudflare Sandbox SDK and Freestyle without installing anything?\n\nNo hosted endpoint is listed for Cloudflare Sandbox SDK. Freestyle has a hosted endpoint at https://api.freestyle.sh/v5.\n\n### Are Cloudflare Sandbox SDK and Freestyle open source?\n\nCloudflare Sandbox SDK is open source (Apache-2.0). No open-source release is listed for Freestyle.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cloudflare-sandbox-sdk\", \"b\": \"freestyle\"}`. From a terminal: `anchor compare cloudflare-sandbox-sdk freestyle`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json and https://www.anchorterminal.com/api/v1/tools/freestyle.json\n\n## Other comparisons with Cloudflare Sandbox SDK or Freestyle\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Freestyle](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-freestyle.md)\n- [Blaxel Sandboxes vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.md)\n- [Blaxel Sandboxes vs Freestyle](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-freestyle.md)\n- [Cloudflare Sandbox SDK vs Daytona](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs E2B](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.md)\n- [Cloudflare Sandbox SDK vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.md)\n- [Cloudflare Sandbox SDK vs Modal Sandboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.md)\n- [Cloudflare Sandbox SDK vs Morph Cloud](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.md)\n- [Cloudflare Sandbox SDK vs Runloop Devboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.md)\n- [Cloudflare Sandbox SDK vs Sprites](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.md)\n- [Cloudflare Sandbox SDK vs Together Code Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.md)\n- [Cloudflare Sandbox SDK vs Vercel Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.md)\n- [Daytona vs Freestyle](https://www.anchorterminal.com/compare/daytona-vs-freestyle.md)\n- [Deno Sandbox vs Freestyle](https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.md)\n- [E2B vs Freestyle](https://www.anchorterminal.com/compare/e2b-vs-freestyle.md)\n- [Freestyle vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.md)\n- [Freestyle vs Modal Sandboxes](https://www.anchorterminal.com/compare/freestyle-vs-modal-sandboxes.md)\n- [Freestyle vs Morph Cloud](https://www.anchorterminal.com/compare/freestyle-vs-morph-cloud.md)\n- [Freestyle vs Runloop Devboxes](https://www.anchorterminal.com/compare/freestyle-vs-runloop.md)\n- [Freestyle vs Sprites](https://www.anchorterminal.com/compare/freestyle-vs-sprites.md)\n- [Freestyle vs Together Code Sandbox](https://www.anchorterminal.com/compare/freestyle-vs-together-code-sandbox.md)\n- [Freestyle vs Vercel Sandbox](https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.md)\n- [Agent 37 Cloud vs Freestyle](https://www.anchorterminal.com/compare/agent37-vs-freestyle.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cloudflare Sandbox SDK vs Freestyle", "url": "" } ], "description": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against Freestyle's 58.5 (C), and leads in 3 of 7 scored categories. Freestyle leads on schema \u0026 documentation, agent ergonomics and payments \u0026 pricing. Both do sandbox code. Category scores, facts, verdicts and agent…", "facts": [ "Cloudflare Sandbox SDK B 67.5", "Freestyle C 58.5", "scores" ], "h1": "Cloudflare Sandbox SDK vs Freestyle", "image": "https://www.anchorterminal.com/assets/og/compare-cloudflare-sandbox-sdk-vs-freestyle.png", "path": "/compare/cloudflare-sandbox-sdk-vs-freestyle", "published": "2026-10-01", "section": "tools", "title": "Cloudflare Sandbox SDK vs Freestyle for AI agents, B 67.5 vs C 58.5", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle" }, "tokens": { "markdown": 2600, "slim": 730 }, "version": 1 }