{ "data": { "a": { "slug": "cloudflare-sandbox-sdk", "name": "Cloudflare Sandbox SDK", "vendor": "Cloudflare", "vendorUrl": "https://developers.cloudflare.com/sandbox/", "kind": "sdk", "category": "code-sandboxes", "summary": "TypeScript library for running sandboxed Linux containers from a Cloudflare Worker.", "url": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json", "repo": "https://github.com/cloudflare/sandbox-sdk", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@cloudflare/sandbox" } ], "auth": "none", "authNotes": "There's no hosted API. The sandbox sits behind a Worker you deploy, so it has whatever auth you put in front of it, and the starter template has none. Deploying needs a Cloudflare account through Wrangler. Version 1.0 adds preview ports with custom hostnames and authentication.", "pricing": "paid", "pricingNotes": "Needs the Workers Paid plan, $5 a month minimum (https://developers.cloudflare.com/workers/platform/pricing/). Billed as Containers plus Workers and Durable Objects. Containers include 25 GiB-hours of memory, 375 vCPU-minutes and 200 GB-hours of disk a month, then $0.0000025 a GiB-second of memory, $0.000020 a vCPU-second of CPU used and $0.00000007 a GB-second of disk, in 10 ms steps while the container runs. Egress is $0.025 a GB in North America and Europe after 1 TB (https://developers.cloudflare.com/containers/pricing/). Durable Objects add $0.15 per million requests and $12.50 per million GB-seconds after the included amounts (https://developers.cloudflare.com/workers/platform/pricing/).", "priceSummary": "$0.072 / vCPU-hr", "where": "local", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1100, "npmWeekly": 722733, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.cloudflare.com/sandbox/", "llmsTxt": "https://developers.cloudflare.com/sandbox/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "typescript", "open-source", "llms-txt" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.5, "grade": "B", "agentReady": false, "rank": 268, "ranked": true, "rankOf": 1098, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "bestFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "strengths": [ "Each sandbox runs in its own VM with a separate filesystem, process space and network stack", "Outbound handlers hold credentials in the Worker and inject them, so the container never sees them", "Egress can be turned off or limited to a deny-by-default `allowedHosts` list", "CPU billed on use at $0.000020 a vCPU-second, with a monthly allowance on Workers Paid", "Apache-2.0, with CodeQL and passing CI on main" ], "weaknesses": [ "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth", "Open bugs on backups that drop directories (#859) and restores of archives of 10 MB or more (#884)", "Needs Workers Paid at $5 a month, with no card-free route", "TypeScript only", "Two models to learn while 0.x and 1.0 overlap until 31 December 2026" ], "agentNotes": [ "Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets", "Put API keys in an outbound handler in the Worker, not in the container's environment", "Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default", "Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs", "Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.5 } ], "editorialScores": { "ergonomics": 63, "maintenance": 70, "payments": 30, "reliability": 87, "schema": 77, "security": 65, "transparency": 45 }, "provenanceScore": 94 }, "connect": { "install": "npm create cloudflare@latest -- my-sandbox --template=cloudflare/sandbox-sdk/examples/minimal" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/cloudflare-sandbox-sdk" }, "sameCompany": [ "cloudflare-ai-gateway", "cloudflare-workers-ai", "cloudflare-web-search", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "area": "agent-runtime", "unitPrices": [ { "item": "Container CPU", "unit": "vcpu-hour", "usd": 0.072, "note": "$0.000020 a vCPU-second of CPU used, after 375 vCPU-minutes a month" }, { "item": "Workers Paid plan", "unit": "month", "usd": 5, "note": "Minimum charge" }, { "item": "Egress, North America and Europe", "unit": "gb", "usd": 0.025, "note": "After 1 TB a month" } ], "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": null, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://developers.cloudflare.com/changelog/?product=sandbox", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The self-serve subscription agreement (updated 12 September 2025) names Cloudflare, Inc., 101 Townsend St., San Francisco.", "There's no vendor endpoint to check. Sandboxes are reached through a Worker on your own route or workers.dev subdomain.", "security.txt lists HackerOne and a disclosure policy, but we didn't see an Expires field.", "The GitHub README still says the SDK is in active development and APIs may change before v1.0, while npm has 1.0.0 (published 2026-09-30) and the changelog announces 1.0. The GitHub releases page showed 0.12.4 (21 July 2026) as its newest release when checked." ], "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.json", "live": { "slug": "cloudflare-sandbox-sdk", "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-16T12:42:54.677278538Z" }, "versions": [ { "registry": "github", "name": "cloudflare/sandbox-sdk", "version": "@cloudflare/sandbox@1.0.1", "released": "2026-10-13", "seenAt": "2026-10-16T00:43:02.440618001Z" }, { "registry": "npm", "name": "@cloudflare/sandbox", "version": "1.0.1", "seenAt": "2026-10-16T00:43:01.234363614Z" } ], "githubStars": 1151, "npmWeekly": 672754, "securityTxt": { "url": "https://cloudflare.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-15T15:48:12.003696412Z" }, "llmsTxt": { "url": "https://developers.cloudflare.com/sandbox/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-15T14:16:24.214750322Z" }, "domain": { "domain": "cloudflare.com", "registered": "2009-02-17", "source": "https://rdap.verisign.com/com/v1/domain/cloudflare.com", "checkedAt": "2026-10-11T13:20:21.49951473Z" }, "pages": [ { "url": "https://developers.cloudflare.com/changelog/?product=sandbox", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-15T21:53:39.817309524Z", "changedAt": "2026-10-15T21:53:39.817309524Z", "fingerprint": "7da683f52364" }, { "url": "https://developers.cloudflare.com/containers/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-15T21:53:51.890161339Z", "changedAt": "2026-10-06T16:07:26.756927967Z", "fingerprint": "f742d2e03f78" }, { "url": "https://developers.cloudflare.com/workers/platform/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-15T21:54:01.79553995Z", "changedAt": "2026-10-13T20:13:31.606047643Z", "fingerprint": "c9f1524515ae" } ], "updatedAt": "2026-10-16T12:42:54.677278538Z" } }, "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against SPACE's 56.2 (C), and leads in 5 of 7 scored categories. SPACE leads on payments \u0026 pricing.", "b": { "slug": "perplexity-space", "name": "SPACE", "vendor": "Perplexity", "vendorUrl": "https://space.docs.perplexity.ai/guide/index.html", "kind": "http-api", "category": "code-sandboxes", "summary": "SPACE is Perplexity's open-source, self-hosted platform for running agent code in Firecracker microVMs. An operator deploys it on Linux with KVM, and applications drive sandboxes through its HTTP and SSE API or an E2B-compatible API.", "url": "https://www.anchorterminal.com/tools/perplexity-space", "markdownUrl": "https://www.anchorterminal.com/tools/perplexity-space.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/perplexity-space.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/perplexity-space.json", "repo": "https://github.com/perplexityai/SPACE", "license": "Apache-2.0", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Nothing to sign up for with Perplexity. On a deployment, the native API takes `Authorization: Bearer` with a token from a password login at `/auth/v1/sessions` or a service token, and users hold admin or member roles. Command streams on the data plane take a separate session-scoped token, valid for 5 minutes, that the API returns with each command. The E2B Compatibility Wrapper takes an E2B-style key in `X-API-Key`, which an operator creates with scripts/seed-api-key.sh and an SQL insert. SPACE stores only its SHA-256 hash. No key scopes or revocation call were found in the reviewed documentation.", "pricing": "free", "pricingNotes": "Free under Apache-2.0, with nothing to buy from Perplexity and no hosted SPACE service. The cost is the operator's own hosts, which need Linux x86_64 with KVM (bare-metal instances in Perplexity's reference EKS deployment), plus PostgreSQL and S3-compatible object storage, with Valkey in the reference EKS deployment (checked 2026-10-16).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs, the OpenAPI document or the source read on 16 October 2026. Self-hosted open-source software with no paid endpoint.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-16" }, "docsUrl": "https://space.docs.perplexity.ai/guide/index.html", "openapi": "https://space.docs.perplexity.ai/api/openapi.json", "capabilities": [ "sandbox.code", "sandbox.persist", "sandbox.fs" ], "tags": [ "open-source", "self-hosted", "free", "no-card", "apache-2.0", "rust", "linux", "kubernetes", "microvm", "openapi", "e2b-compatible", "pre-1.0", "new" ], "graded": true, "anchor": { "graded": true, "score": 56.2, "grade": "C", "agentReady": false, "rank": 683, "ranked": true, "rankOf": 1098, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 26, "payments": 60, "reliability": 32, "schema": 75, "security": 64, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-16" }, "negative": 0, "verdict": "Once deployed, SPACE's native API has a public OpenAPI 3.1 contract, stable error codes with a retryable flag and 24-hour idempotency keys, and egress and credential controls sit outside the VM. A person must first deploy it on a Linux x86_64 host with KVM and Kubernetes. Version 0.8.0 has no tagged release, changelog or public container images.", "bestFor": "Teams that want E2B-style microVM sandboxes on their own Linux and Kubernetes hosts, with egress and credential control outside the guest.", "strengths": [ "OpenAPI 3.1 for 14 supported operations, served by each deployment at `/openapi-m1.json` and published on the docs site", "Errors carry a stable `code`, a `retryable` flag and a request ID, and lifecycle calls and command creation take a 24-hour `Idempotency-Key`", "Per-sandbox egress policies with allow and deny lists, operator egress profiles and TLS interception are enforced by a gateway outside the guest", "The network gateway can add secret headers from AWS Secrets Manager for an exact host and path, so the guest never holds the value", "An E2B Compatibility Wrapper lets the E2B Python SDK, tested at e2b 2.21.1, use a SPACE deployment as its backend" ], "weaknesses": [ "A person must deploy it first, on an apt-based Linux x86_64 host with KVM, privileged Docker and Kubernetes (Kind in the guide)", "Version 0.8.0 has no git tag, GitHub release or changelog, and CI pushes container images only to a private registry", "The `network_policy` and idle-lifecycle create fields are marked incubating, outside the supported contract, and typed as open objects", "Credential injection is off by default, needs AWS Secrets Manager, and has no page of its own in the user guide", "The wrapper rejects E2B's `mcp`, `volumeMounts` and `iam` options, team template names and pause without memory, and only Python is tested" ], "agentNotes": [ "Ask your operator for the API base URL (before `/v1`, or `/api/v1` on shared hosts), the data-plane URL and a bearer token before planning any call", "Poll the returned operation until it succeeds and the sandbox is `running` before creating a command. A 202 response is not readiness", "Attach to the command's events URL with its session token to start the process, decode base64 output, and treat only `process_exited` as completion", "Send an `Idempotency-Key` on creates, lifecycle calls and commands, and retry only when `retryable` is true, after any `Retry-After`", "Save output as it arrives. Reconnecting with `Last-Event-ID` returns `resync_required`, not the missed output" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 26, "payments": 60, "reliability": 32, "schema": 75, "security": 64, "transparency": 73 }, "provenanceScore": 63 }, "connect": { "install": "git clone https://github.com/perplexityai/SPACE.git \u0026\u0026 cd SPACE\nbash infra/space/kind/scripts/install-prereqs.sh\nexport SPACE_VENDOR_ROOT=\"$HOME/.local/share/space/vendor\"\nexport SPACE_KIND_CLUSTER=space-local\nbash infra/space/kind/scripts/install-fc-vendor.sh\nbash infra/space/kind/scripts/bootstrap.sh", "http": "curl --fail-with-body --silent --show-error \\\n --header \"Authorization: Bearer $SPACE_API_TOKEN\" \\\n \"${SPACE_API_URL%/}/v1/sandboxes\"" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/perplexity-space" }, "sameCompany": [ "pplx-decider" ], "area": "agent-runtime", "provenance": { "legalEntity": "Perplexity AI", "domain": "perplexity.ai", "domainRegistered": "2022-07-08", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-16", "notes": [ "LICENSE reads 'Copyright 2026 Perplexity AI', and the repository's Claude Code plugin manifest names Perplexity AI as owner. No fuller legal entity name was found in the repository or the docs.", "The docs site is space.docs.perplexity.ai and the repository is under GitHub's perplexityai organisation. RDAP from Identity Digital gives perplexity.ai a registration date of 8 July 2022.", "No terms or privacy policy applies to the self-hosted software beyond the Apache-2.0 licence. There is no hosted SPACE endpoint, so no status page.", "No changelog or release notes. docs/versioning.md says the v0.8.0 tag should mark the tested commit, and the clone had no tags on 16 October 2026.", "https://www.perplexity.ai/.well-known/security.txt and https://space.docs.perplexity.ai/.well-known/security.txt both returned Contact security@perplexity.ai, Expires 2027-12-31T00:00:00Z and Policy https://www.perplexity.ai/security on 16 October 2026. The robots.txt of www.perplexity.ai allows that path.", "WebFetch refused the docs site as outside its allowed set, so the guide index, API index, openapi.json, build.json files and security.txt were read with curl. space.docs.perplexity.ai has no robots.txt (404). WebFetch refused github.com under its robots.txt, so stars, issues and CI results were not read." ], "score": 63 }, "requirements": { "card": "no", "freeTier": true, "minutes": 120, "credential": "mixed", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/perplexity-space.json" }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Cloudflare", "b": "Perplexity", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-09-30", "b": "none", "name": "Last release" }, { "a": "2025-09-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "1.1k stars, 723k npm/wk", "b": "none", "name": "Popularity" }, { "a": "3/5 (2)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against SPACE's 56.2 (C), and leads in 5 of 7 scored categories. SPACE leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Cloudflare Sandbox SDK or SPACE?" }, { "answer": "No hosted endpoint is listed for Cloudflare Sandbox SDK. No hosted endpoint is listed for SPACE.", "question": "Can an agent call Cloudflare Sandbox SDK and SPACE without installing anything?" }, { "answer": "Yes. Cloudflare Sandbox SDK is open source (Apache-2.0). SPACE is open source (Apache-2.0).", "question": "Are Cloudflare Sandbox SDK and SPACE open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 87 against 32", "Maintenance \u0026 community, 70 against 26" ], "also": [ "No key needed to call it" ], "goodFor": "Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.", "slug": "cloudflare-sandbox-sdk", "watchFor": "No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth" }, { "aheadOn": [ "Payments \u0026 pricing, 60 against 30" ], "also": [ "Free to start without a card" ], "goodFor": "Teams that want E2B-style microVM sandboxes on their own Linux and Kubernetes hosts, with egress and credential control outside the guest.", "slug": "perplexity-space", "watchFor": "A person must deploy it first, on an apt-based Linux x86_64 host with KVM, privileged Docker and Kubernetes (Kind in the guide)" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs SPACE", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.json", "title": "Blaxel Sandboxes vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-perplexity-space.json", "title": "Blaxel Sandboxes vs SPACE", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.json", "title": "Cloudflare Sandbox SDK vs Daytona", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.json", "title": "Cloudflare Sandbox SDK vs E2B", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.json", "title": "Cloudflare Sandbox SDK vs Freestyle", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.json", "title": "Cloudflare Sandbox SDK vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.json", "title": "Cloudflare Sandbox SDK vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.json", "title": "Cloudflare Sandbox SDK vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.json", "title": "Cloudflare Sandbox SDK vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.json", "title": "Cloudflare Sandbox SDK vs Sprites", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.json", "title": "Cloudflare Sandbox SDK vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.json", "title": "Cloudflare Sandbox SDK vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-perplexity-space.json", "title": "Daytona vs SPACE", "url": "https://www.anchorterminal.com/compare/daytona-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.json", "title": "Deno Sandbox vs SPACE", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-perplexity-space.json", "title": "E2B vs SPACE", "url": "https://www.anchorterminal.com/compare/e2b-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-perplexity-space.json", "title": "Freestyle vs SPACE", "url": "https://www.anchorterminal.com/compare/freestyle-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.json", "title": "Microsoft Execution Containers vs SPACE", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-perplexity-space.json", "title": "Modal Sandboxes vs SPACE", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-perplexity-space.json", "title": "Morph Cloud vs SPACE", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-runloop.json", "title": "SPACE vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-sprites.json", "title": "SPACE vs Sprites", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-together-code-sandbox.json", "title": "SPACE vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-vercel-sandbox.json", "title": "SPACE vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.json", "title": "Agent 37 Cloud vs Cloudflare Sandbox SDK", "url": "https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-perplexity-space.json", "title": "Agent 37 Cloud vs SPACE", "url": "https://www.anchorterminal.com/compare/agent37-vs-perplexity-space" } ], "scores": [ { "by": 55, "cloudflare-sandbox-sdk": 87, "edge": "cloudflare-sandbox-sdk", "key": "reliability", "name": "Reliability", "perplexity-space": 32, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "cloudflare-sandbox-sdk": 77, "edge": "cloudflare-sandbox-sdk", "key": "schema", "name": "Schema \u0026 documentation", "perplexity-space": 75, "weight": 13 }, { "by": 3, "cloudflare-sandbox-sdk": 63, "edge": "perplexity-space", "key": "ergonomics", "name": "Agent ergonomics", "perplexity-space": 66, "weight": 13 }, { "by": 1, "cloudflare-sandbox-sdk": 65, "edge": "cloudflare-sandbox-sdk", "key": "security", "name": "Security \u0026 auth", "perplexity-space": 64, "weight": 14 }, { "by": 30, "cloudflare-sandbox-sdk": 30, "edge": "perplexity-space", "key": "payments", "name": "Payments \u0026 pricing", "perplexity-space": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 44, "cloudflare-sandbox-sdk": 70, "edge": "cloudflare-sandbox-sdk", "key": "maintenance", "name": "Maintenance \u0026 community", "perplexity-space": 26, "weight": 7 }, { "by": 2, "cloudflare-sandbox-sdk": 70, "edge": "cloudflare-sandbox-sdk", "key": "transparency", "name": "Transparency \u0026 trust", "perplexity-space": 68, "weight": 7 } ], "summary": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against SPACE's 56.2 (C), and leads in 5 of 7 scored categories. SPACE leads on payments \u0026 pricing. Both do code sandboxes.", "tutorials": [], "verdicts": { "cloudflare-sandbox-sdk": "Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.", "perplexity-space": "Once deployed, SPACE's native API has a public OpenAPI 3.1 contract, stable error codes with a retryable flag and 24-hour idempotency keys, and egress and credential controls sit outside the VM. A person must first deploy it on a Linux x86_64 host with KVM and Kubernetes. Version 0.8.0 has no tagged release, changelog or public container images." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space", "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.min.md" }, "markdown": "Cloudflare Sandbox SDK scores 67.5 (B) on agent readiness against SPACE's 56.2 (C), and leads in 5 of 7 scored categories. SPACE leads on payments \u0026 pricing. Both do code sandboxes.\n\n- Cloudflare Sandbox SDK: grade B, 67.5/100, rank #268 of 1098. Markdown https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json\n- SPACE: grade C, 56.2/100, rank #683 of 1098. Markdown https://www.anchorterminal.com/tools/perplexity-space.md · JSON https://www.anchorterminal.com/api/v1/tools/perplexity-space.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 120 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Cloudflare Sandbox SDK (B)\n\nGood for: Agents already built on Workers and Durable Objects that want sandboxes in the same account with credential injection at the edge.\n\nAhead on:\n- Reliability, 87 against 32\n- Maintenance \u0026 community, 70 against 26\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth\n\n### SPACE (C)\n\nGood for: Teams that want E2B-style microVM sandboxes on their own Linux and Kubernetes hosts, with egress and credential control outside the guest.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 30\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: A person must deploy it first, on an apt-based Linux x86_64 host with KVM, privileged Docker and Kubernetes (Kind in the guide)\n\n\n## Score by category\n\n| Category | Weight | Cloudflare Sandbox SDK | SPACE | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 87 | 32 | Cloudflare Sandbox SDK +55 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 75 | Cloudflare Sandbox SDK +2 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 66 | SPACE +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 65 | 64 | Cloudflare Sandbox SDK +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | SPACE +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 26 | Cloudflare Sandbox SDK +44 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 68 | Cloudflare Sandbox SDK +2 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **67.5 · B** | **56.2 · C** | |\n\n## Facts side by side\n\n| Fact | Cloudflare Sandbox SDK | SPACE |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Cloudflare | Perplexity |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-30 | none |\n| Terms last updated | 2025-09-12 | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 1.1k stars, 723k npm/wk | none |\n| Agent reviews | 3/5 (2) | 3/5 (4) |\n\n## Verdicts\n\n**Cloudflare Sandbox SDK.** Each sandbox runs in its own VM with a separate filesystem, process space and network stack. No hosted API. You deploy and secure a Worker before an agent can call anything, and the starter has no auth.\n\n**SPACE.** Once deployed, SPACE's native API has a public OpenAPI 3.1 contract, stable error codes with a retryable flag and 24-hour idempotency keys, and egress and credential controls sit outside the VM. A person must first deploy it on a Linux x86_64 host with KVM and Kubernetes. Version 0.8.0 has no tagged release, changelog or public container images.\n\n## Before you call either\n\n### Cloudflare Sandbox SDK\n\n1. Derive the sandbox ID from the authenticated user, as the docs advise. IDs aren't secrets\n2. Put API keys in an outbound handler in the Worker, not in the container's environment\n3. Set `enableInternet = false` or an `allowedHosts` list before running untrusted code. Internet access is on by default\n4. Check that a restored backup has every directory you expect. Backups of 10 MB or more have open bugs\n5. Start new projects on 1.0. The 0.x library only gets fixes until 31 December 2026\n\n### SPACE\n\n1. Ask your operator for the API base URL (before `/v1`, or `/api/v1` on shared hosts), the data-plane URL and a bearer token before planning any call\n2. Poll the returned operation until it succeeds and the sandbox is `running` before creating a command. A 202 response is not readiness\n3. Attach to the command's events URL with its session token to start the process, decode base64 output, and treat only `process_exited` as completion\n4. Send an `Idempotency-Key` on creates, lifecycle calls and commands, and retry only when `retryable` is true, after any `Retry-After`\n5. Save output as it arrives. Reconnecting with `Last-Event-ID` returns `resync_required`, not the missed output\n\n## Questions\n\n### Which is better for AI agents, Cloudflare Sandbox SDK or SPACE?\n\nCloudflare Sandbox SDK scores 67.5 (B) on agent readiness against SPACE's 56.2 (C), and leads in 5 of 7 scored categories. SPACE leads on payments \u0026 pricing.\n\n### Can an agent call Cloudflare Sandbox SDK and SPACE without installing anything?\n\nNo hosted endpoint is listed for Cloudflare Sandbox SDK. No hosted endpoint is listed for SPACE.\n\n### Are Cloudflare Sandbox SDK and SPACE open source?\n\nYes. Cloudflare Sandbox SDK is open source (Apache-2.0). SPACE is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cloudflare-sandbox-sdk\", \"b\": \"perplexity-space\"}`. From a terminal: `anchor compare cloudflare-sandbox-sdk perplexity-space`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cloudflare-sandbox-sdk.json and https://www.anchorterminal.com/api/v1/tools/perplexity-space.json\n\n## Other comparisons with Cloudflare Sandbox SDK or SPACE\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-cloudflare-sandbox-sdk.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs SPACE](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-perplexity-space.md)\n- [Blaxel Sandboxes vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-cloudflare-sandbox-sdk.md)\n- [Blaxel Sandboxes vs SPACE](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-perplexity-space.md)\n- [Cloudflare Sandbox SDK vs Daytona](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-daytona.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs E2B](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-e2b.md)\n- [Cloudflare Sandbox SDK vs Freestyle](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-freestyle.md)\n- [Cloudflare Sandbox SDK vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.md)\n- [Cloudflare Sandbox SDK vs Modal Sandboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-modal-sandboxes.md)\n- [Cloudflare Sandbox SDK vs Morph Cloud](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-morph-cloud.md)\n- [Cloudflare Sandbox SDK vs Runloop Devboxes](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-runloop.md)\n- [Cloudflare Sandbox SDK vs Sprites](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sprites.md)\n- [Cloudflare Sandbox SDK vs Together Code Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-together-code-sandbox.md)\n- [Cloudflare Sandbox SDK vs Vercel Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.md)\n- [Daytona vs SPACE](https://www.anchorterminal.com/compare/daytona-vs-perplexity-space.md)\n- [Deno Sandbox vs SPACE](https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.md)\n- [E2B vs SPACE](https://www.anchorterminal.com/compare/e2b-vs-perplexity-space.md)\n- [Freestyle vs SPACE](https://www.anchorterminal.com/compare/freestyle-vs-perplexity-space.md)\n- [Microsoft Execution Containers vs SPACE](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.md)\n- [Modal Sandboxes vs SPACE](https://www.anchorterminal.com/compare/modal-sandboxes-vs-perplexity-space.md)\n- [Morph Cloud vs SPACE](https://www.anchorterminal.com/compare/morph-cloud-vs-perplexity-space.md)\n- [SPACE vs Runloop Devboxes](https://www.anchorterminal.com/compare/perplexity-space-vs-runloop.md)\n- [SPACE vs Sprites](https://www.anchorterminal.com/compare/perplexity-space-vs-sprites.md)\n- [SPACE vs Together Code Sandbox](https://www.anchorterminal.com/compare/perplexity-space-vs-together-code-sandbox.md)\n- [SPACE vs Vercel Sandbox](https://www.anchorterminal.com/compare/perplexity-space-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Cloudflare Sandbox SDK](https://www.anchorterminal.com/compare/agent37-vs-cloudflare-sandbox-sdk.md)\n- [Agent 37 Cloud vs SPACE](https://www.anchorterminal.com/compare/agent37-vs-perplexity-space.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-16", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cloudflare Sandbox SDK vs SPACE", "url": "" } ], "description": "Cloudflare Sandbox SDK scores 67.5 (B) to SPACE's 56.2 (C) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Cloudflare Sandbox SDK B 67.5", "SPACE C 56.2", "scores" ], "h1": "Cloudflare Sandbox SDK vs SPACE", "image": "https://www.anchorterminal.com/assets/og/compare-cloudflare-sandbox-sdk-vs-perplexity-space.png", "path": "/compare/cloudflare-sandbox-sdk-vs-perplexity-space", "published": "2026-10-01", "section": "tools", "title": "Cloudflare Sandbox SDK vs SPACE for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-10-16", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-perplexity-space" }, "tokens": { "markdown": 2650, "slim": 630 }, "version": 1 }