{ "data": { "a": { "slug": "deltabox-lite", "name": "DeltaBox Lite", "vendor": "DeltaBox (delta-box)", "vendorUrl": "https://github.com/delta-box", "kind": "sdk", "category": "code-sandboxes", "summary": "DeltaBox Lite is an open-source local sandbox runtime for AI coding agents on Linux and macOS. Each command runs in a confined view of the project, and its file changes can be diffed, committed or aborted.", "url": "https://www.anchorterminal.com/tools/deltabox-lite", "markdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json", "repo": "https://github.com/delta-box/deltabox-lite", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "deltabox-lite" } ], "auth": "none", "authNotes": "No account, key or sign-in. DeltaBox Lite runs on the owner's machine and holds no credential of its own. Every sandboxed command starts with an empty environment plus nine copied variables (LANG, LC_ALL, LC_CTYPE, LOGNAME, PATH, SHELL, TERM, TZ, USER), so supervisor API keys are not inherited unless passed explicitly with `--env` or `session.exec.env` (https://github.com/delta-box/deltabox-lite/blob/main/docs/policy.md).", "pricing": "free", "pricingNotes": "Free. Apache-2.0 software that installs from npm, Homebrew or GitHub release tarballs with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine (checked 2026-10-17).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source. Local open-source software with no paid endpoint (checked 2026-10-17).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/delta-box/deltabox-lite/blob/main/README.md", "capabilities": [ "sandbox.fs", "sandbox.code", "sandbox.persist" ], "tags": [ "open-source", "local", "free", "no-auth", "no-card", "apache-2.0", "rust", "cli", "json-rpc", "linux", "macos", "pre-1.0", "new" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 52.3, "grade": "D", "agentReady": false, "rank": 825, "ranked": true, "rankOf": 1133, "categoryRank": 15, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "bestFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "strengths": [ "Apache-2.0, free and local, installing from npm, Homebrew or checksummed release tarballs for Linux and macOS on x64 and arm64", "Every command's file changes can be diffed, committed or aborted, with a checkpoint chain and conflict-checked commits", "Sandboxed commands start with an empty environment plus nine named variables, and common secret paths such as `.env`, `.ssh` and `*.pem` are denied by default", "One-line transactions (`deltabox run --commit` or `--abort`) and a line-delimited JSON-RPC protocol over stdio with 15 methods", "No telemetry or analytics calls were found in the source" ], "weaknesses": [ "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration", "The default network mode `allow_audit` permits unrestricted networking, and no network audit log was found in the source", "The agent install prompt tells the agent it can star the repository through the user's authenticated GitHub CLI", "The only CI workflow builds release binaries and runs `--version` smoke checks on tags. The 288 test functions in the repository are not run in CI", "No SECURITY.md, security.txt or disclosure policy was found" ], "agentNotes": [ "Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.", "Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.", "Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.", "Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.", "Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.3 } ], "editorialScores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 52 }, "provenanceScore": 27 }, "connect": { "install": "npm install --global deltabox-lite", "headless": { "abort": "deltabox run --abort -- sh -c 'printf \"sandboxed\\n\" \u003e\u003e notes.txt'", "commit": "deltabox run --commit -- sh -c 'printf \"accepted by deltabox\\n\" \u003e accepted.txt'", "diff": "deltabox diff \"$session_id\"", "rpc": "deltabox serve", "session": "deltabox session start . --json" } }, "letme": { "capability": "https://letme.dev/sandbox.fs", "tool": "https://letme.dev/deltabox-lite" }, "area": "agent-runtime", "provenance": { "legalEntity": "", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/delta-box/deltabox-lite/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "No legal entity is named in the repository, the licence or the npm records. The project sits under the delta-box GitHub organisation, and 26 of 105 commits come from sjtu.edu.cn addresses. The npm packages are published by the account xeonliu.", "The project has no website, terms or privacy policy. The README and the docs folder are the only documentation.", "The repository has no SECURITY.md, and there is no project domain to hold a security.txt.", "The software runs on the owner's machine, so there is no vendor endpoint or status page to check." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deltabox-lite.json", "live": { "slug": "deltabox-lite", "pages": [ { "url": "https://raw.githubusercontent.com/delta-box/deltabox-lite/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:09:46.794533554Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0d8c10328fc8" } ], "updatedAt": "2026-10-17T23:09:46.794533554Z" } }, "answer": "DeltaBox Lite scores 52.3 (D) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 3 of 7 scored categories. Deno Sandbox leads on reliability, security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "deno-sandbox", "name": "Deno Sandbox", "vendor": "Deno Land Inc.", "vendorUrl": "https://deno.com", "kind": "http-api", "category": "code-sandboxes", "summary": "Deno Sandbox runs Linux microVMs on Deno Deploy for untrusted or AI-generated code. It is driven from the `@deno/sandbox` JavaScript SDK, the `deno-sandbox` Python SDK or the `deno sandbox` CLI, and launched in beta on 3 February 2026.", "url": "https://www.anchorterminal.com/tools/deno-sandbox", "markdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json", "repo": "https://github.com/denoland/sandbox-py", "license": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@deno/sandbox" }, { "registry": "pypi", "name": "deno-sandbox" } ], "auth": "api-key", "authNotes": "An organisation access token (prefix `ddo_`) created under Settings in console.deno.com, read by the SDKs from `DENO_DEPLOY_TOKEN` and sent as a Bearer token. The same token manages the organisation's Deno Deploy apps. No scopes or expiry were found in the reviewed docs, the docs say to rotate a leaked token from the dashboard, and all organisation members hold owner permissions. Signup is in a browser.", "pricing": "paid", "pricingNotes": "Sandboxes need the Pro plan ($20 a month) or above, and the Free plan does not include them. Compute bills through the Deploy meters at $0.10 a CPU-hour and $0.025 a GiB-hour of memory beyond the plan's allowance (50 CPU-hours and 750 GiB-hours on Pro), and volume storage at $0.20 a GiB-month beyond 5 GiB on Pro. Spend limits can be set on paid plans (https://deno.com/deploy/pricing, checked 2026-10-08).", "priceSummary": "$0.10 / vCPU-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the sandbox docs, the pricing page or the OpenAPI document (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 6, "npmWeekly": 1971, "pypiWeekly": 31729, "asOf": "2026-10-08" }, "docsUrl": "https://docs.deno.com/sandbox/", "llmsTxt": "https://docs.deno.com/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "paid", "beta", "microvm", "typescript", "python", "cli", "llms-txt", "status-page", "enterprise" ], "lastRelease": "2026-07-22", "graded": true, "anchor": { "graded": true, "score": 50.3, "grade": "D", "agentReady": false, "rank": 873, "ranked": true, "rankOf": 1133, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -2, "negativeNotes": [ "2026-10-08: the Create page (last modified 28 January 2026) says a default sandbox has no outbound network access, while the Security page of the same date says outbound access is unrestricted unless `allowNet` is set. A reader of the first page would leave egress open. 2 points. https://docs.deno.com/sandbox/create/ and https://docs.deno.com/sandbox/security/" ], "verdict": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.", "bestFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "strengths": [ "Secrets are held outside the VM. Code sees a placeholder, and the real value is substituted only on requests to hosts named for that secret", "`allowNet` restricts outbound traffic to listed hostnames, wildcard subdomains, ports or IP addresses", "Each sandbox is a Firecracker microVM per the product page, with 2 vCPUs, 768 MB to 4 GB of memory and 10 GB of disk", "Volumes of 300 MB to 20 GB persist between sandboxes, and read-only snapshots of a volume can boot new sandboxes", "Unit prices are public, $0.10 a CPU-hour, $0.025 a GiB-hour of memory and $0.20 a GiB-month of volume storage" ], "weaknesses": [ "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found", "Sandboxes are not included in the Free plan. Access starts at Pro, $20 a month, after a browser signup", "The published OpenAPI document at `api.deno.com/v2/openapi.json` has 34 operations and none for sandboxes, volumes or snapshots", "The Create page says a default sandbox has no outbound network access, and the Security page says outbound access is unrestricted by default", "Maximum lifetime is 30 minutes, volumes exist only in `ord`, and no API rate limits or 429 guidance were found", "Organisation tokens carry no scopes in the reviewed docs, and every organisation member has owner permissions" ], "agentNotes": [ "Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above", "Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted", "Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder", "The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes", "Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region", "`exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.3 } ], "editorialScores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 35 }, "provenanceScore": 80 }, "connect": { "install": "npm install @deno/sandbox # or pip install deno-sandbox" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/deno-sandbox" }, "area": "agent-runtime", "unitPrices": [ { "item": "Active CPU beyond plan allowance", "unit": "vcpu-hour", "usd": 0.1, "note": "Memory extra at $0.025 a GiB-hour" }, { "item": "Volume storage beyond plan allowance", "unit": "gb-month", "usd": 0.2, "note": "Priced per GiB" }, { "item": "Pro plan, the lowest that includes sandboxes", "unit": "month", "usd": 20, "note": "Includes 50 CPU-hours, 750 GiB-hours of memory and 5 GiB of volume storage" } ], "provenance": { "legalEntity": "Deno Land Inc.", "domain": "deno.com", "domainRegistered": "1999-03-09", "endpointOnVendorDomain": false, "terms": "https://docs.deno.com/deploy/terms_and_conditions/", "privacy": "https://docs.deno.com/deploy/privacy_policy/", "statusPage": "https://denostatus.com", "changelog": "https://docs.deno.com/deploy/changelog/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Deno Deploy terms and conditions (last modified 30 September 2026) name Deno Land Inc. and govern the Deploy services, of which Sandbox is a part. No separate sandbox terms were found.", "The privacy policy (last modified 30 September 2026) gives Deno Land Inc., 1111 6th Ave Ste 550, PMB 702973, San Diego CA 92101. A DPA is listed under Enterprise only, and no public copy was found.", "The Python SDK's default sandbox endpoint is `\u003cregion\u003e.sandbox-api.deno.net`, a second domain of the vendor's, while listing and volumes go through console.deno.com.", "deno.com/.well-known/security.txt gives deploy@deno.com and a policy link and has no Expires field, which RFC 9116 requires. It is recorded as valid to match other listings with the same gap. The policy page gives security@deno.com.", "RDAP for deno.com gives a registration date of 1999-03-09.", "The Deploy changelog's newest entry is dated 12 March 2026." ], "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deno-sandbox.json", "live": { "slug": "deno-sandbox", "vendorStatus": { "page": "https://denostatus.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:50:58.713580114Z" }, "versions": [ { "registry": "github", "name": "denoland/sandbox-py", "version": "v0.15.0", "released": "2026-03-13", "seenAt": "2026-10-17T01:44:22.771034137Z" }, { "registry": "npm", "name": "@deno/sandbox", "version": "0.13.2", "seenAt": "2026-10-17T01:44:21.668423649Z" }, { "registry": "pypi", "name": "deno-sandbox", "version": "0.16.0", "released": "2026-07-22", "seenAt": "2026-10-17T01:44:22.582876369Z" } ], "githubStars": 6, "npmWeekly": 1288, "pypiWeekly": 58487, "securityTxt": { "url": "https://deno.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-17T15:52:09.40813154Z" }, "llmsTxt": { "url": "https://docs.deno.com/llms.txt", "ok": false, "status": 500, "checkedAt": "2026-10-17T14:21:57.968203515Z" }, "domain": { "domain": "deno.com", "registered": "1999-03-09", "source": "https://rdap.verisign.com/com/v1/domain/deno.com", "checkedAt": "2026-10-11T13:24:23.955117671Z" }, "pages": [ { "url": "https://docs.deno.com/deploy/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-17T23:00:52.976436053Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "970657376187" }, { "url": "https://deno.com/deploy/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T22:58:32.949228029Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "32f3f605102d" }, { "url": "https://docs.deno.com/deploy/privacy_policy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-17T23:00:54.99425515Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8daa7ca4099e" }, { "url": "https://docs.deno.com/deploy/terms_and_conditions/", "kind": "terms", "status": 304, "checkedAt": "2026-10-17T23:00:56.989948353Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "95a600f10514" } ], "updatedAt": "2026-10-17T23:00:56.989948353Z" } }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "DeltaBox (delta-box)", "b": "Deno Land Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-14", "b": "2026-07-22", "name": "Last release" }, { "a": "no document linked", "b": "2026-09-30", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-09-30", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "6 stars, 2k npm/wk, 32k PyPI/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "DeltaBox Lite scores 52.3 (D) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 3 of 7 scored categories. Deno Sandbox leads on reliability, security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, DeltaBox Lite or Deno Sandbox?" }, { "answer": "No hosted endpoint is listed for DeltaBox Lite. No hosted endpoint is listed for Deno Sandbox.", "question": "Can an agent call DeltaBox Lite and Deno Sandbox without installing anything?" }, { "answer": "DeltaBox Lite is open source (Apache-2.0). No open-source release is listed for Deno Sandbox.", "question": "Are DeltaBox Lite and Deno Sandbox open source?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 67 against 60", "Payments \u0026 pricing, 60 against 20" ], "also": [ "No key needed to call it", "Free to start without a card", "Open source" ], "goodFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "slug": "deltabox-lite", "watchFor": "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration" }, { "aheadOn": [ "Reliability, 48 against 37", "Security \u0026 auth, 61 against 47", "Transparency \u0026 trust, 58 against 40" ], "also": null, "goodFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "slug": "deno-sandbox", "watchFor": "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found" } ], "job": { "capability": "sandbox.fs", "name": "Sandbox fs" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.json", "title": "Blaxel Sandboxes vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.json", "title": "Blaxel Sandboxes vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.json", "title": "Cloudflare Sandbox SDK vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.json", "title": "Daytona vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.json", "title": "Daytona vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.json", "title": "Deno Sandbox vs E2B", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.json", "title": "Deno Sandbox vs Freestyle", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.json", "title": "Deno Sandbox vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.json", "title": "Deno Sandbox vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.json", "title": "Deno Sandbox vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.json", "title": "Deno Sandbox vs Offscreen", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.json", "title": "Deno Sandbox vs SPACE", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.json", "title": "Deno Sandbox vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.json", "title": "Deno Sandbox vs Sprites", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.json", "title": "Deno Sandbox vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.json", "title": "Deno Sandbox vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.json", "title": "Agent 37 Cloud vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.json", "title": "Agent 37 Cloud vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.json", "title": "DeltaBox Lite vs E2B", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.json", "title": "DeltaBox Lite vs Freestyle", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json", "title": "DeltaBox Lite vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.json", "title": "DeltaBox Lite vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.json", "title": "DeltaBox Lite vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.json", "title": "DeltaBox Lite vs SPACE", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.json", "title": "DeltaBox Lite vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.json", "title": "DeltaBox Lite vs Sprites", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.json", "title": "DeltaBox Lite vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.json", "title": "DeltaBox Lite vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox" } ], "scores": [ { "by": 11, "deltabox-lite": 37, "deno-sandbox": 48, "edge": "deno-sandbox", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "deltabox-lite": 68, "deno-sandbox": 66, "edge": "deltabox-lite", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 7, "deltabox-lite": 67, "deno-sandbox": 60, "edge": "deltabox-lite", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 14, "deltabox-lite": 47, "deno-sandbox": 61, "edge": "deno-sandbox", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 40, "deltabox-lite": 60, "deno-sandbox": 20, "edge": "deltabox-lite", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "deltabox-lite": 43, "deno-sandbox": 45, "edge": "deno-sandbox", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 18, "deltabox-lite": 40, "deno-sandbox": 58, "edge": "deno-sandbox", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "DeltaBox Lite scores 52.3 (D) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 3 of 7 scored categories. Deno Sandbox leads on reliability, security \u0026 auth and transparency \u0026 trust. Both do sandbox fs.", "tutorials": [], "verdicts": { "deltabox-lite": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "deno-sandbox": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox", "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.min.md" }, "markdown": "DeltaBox Lite scores 52.3 (D) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 3 of 7 scored categories. Deno Sandbox leads on reliability, security \u0026 auth and transparency \u0026 trust. Both do sandbox fs.\n\n- DeltaBox Lite: grade D, 52.3/100, rank #825 of 1133. Markdown https://www.anchorterminal.com/tools/deltabox-lite.md · JSON https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json\n- Deno Sandbox: grade D, 50.3/100, rank #873 of 1133. Markdown https://www.anchorterminal.com/tools/deno-sandbox.md · JSON https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 153 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### DeltaBox Lite (D)\n\nGood for: A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.\n\nAhead on:\n- Agent ergonomics, 67 against 60\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n- Open source\n\nWatch for: Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration\n\n### Deno Sandbox (D)\n\nGood for: Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.\n\nAhead on:\n- Reliability, 48 against 37\n- Security \u0026 auth, 61 against 47\n- Transparency \u0026 trust, 58 against 40\n\nWatch for: Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found\n\n\n## Score by category\n\n| Category | Weight | DeltaBox Lite | Deno Sandbox | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 37 | 48 | Deno Sandbox +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 68 | 66 | DeltaBox Lite +2 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 60 | DeltaBox Lite +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 47 | 61 | Deno Sandbox +14 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 20 | DeltaBox Lite +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 43 | 45 | Deno Sandbox +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 40 | 58 | Deno Sandbox +18 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **52.3 · D** | **50.3 · D** | |\n\n## Facts side by side\n\n| Fact | DeltaBox Lite | Deno Sandbox |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | DeltaBox (delta-box) | Deno Land Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Free | Paid |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| Last release | 2026-10-14 | 2026-07-22 |\n| Terms last updated | no document linked | 2026-09-30 |\n| Privacy policy last updated | no document linked | 2026-09-30 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | yes |\n| Popularity | none | 6 stars, 2k npm/wk, 32k PyPI/wk |\n| Agent reviews | 2.8/5 (4) | none |\n\n## Verdicts\n\n**DeltaBox Lite.** DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.\n\n**Deno Sandbox.** Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.\n\n## Before you call either\n\n### DeltaBox Lite\n\n1. Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.\n2. Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.\n3. Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.\n4. Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.\n5. Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation.\n\n### Deno Sandbox\n\n1. Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above\n2. Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted\n3. Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder\n4. The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes\n5. Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region\n6. `exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret\n\n## Questions\n\n### Which is better for AI agents, DeltaBox Lite or Deno Sandbox?\n\nDeltaBox Lite scores 52.3 (D) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 3 of 7 scored categories. Deno Sandbox leads on reliability, security \u0026 auth and transparency \u0026 trust.\n\n### Can an agent call DeltaBox Lite and Deno Sandbox without installing anything?\n\nNo hosted endpoint is listed for DeltaBox Lite. No hosted endpoint is listed for Deno Sandbox.\n\n### Are DeltaBox Lite and Deno Sandbox open source?\n\nDeltaBox Lite is open source (Apache-2.0). No open-source release is listed for Deno Sandbox.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deltabox-lite\", \"b\": \"deno-sandbox\"}`. From a terminal: `anchor compare deltabox-lite deno-sandbox`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json and https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json\n\n## Other comparisons with DeltaBox Lite or Deno Sandbox\n\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.md)\n- [Blaxel Sandboxes vs DeltaBox Lite](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.md)\n- [Blaxel Sandboxes vs Deno Sandbox](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs DeltaBox Lite](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Daytona vs DeltaBox Lite](https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.md)\n- [Daytona vs Deno Sandbox](https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.md)\n- [Deno Sandbox vs E2B](https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.md)\n- [Deno Sandbox vs Freestyle](https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.md)\n- [Deno Sandbox vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.md)\n- [Deno Sandbox vs Modal Sandboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.md)\n- [Deno Sandbox vs Morph Cloud](https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.md)\n- [Deno Sandbox vs Offscreen](https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.md)\n- [Deno Sandbox vs SPACE](https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.md)\n- [Deno Sandbox vs Runloop Devboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.md)\n- [Deno Sandbox vs Sprites](https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.md)\n- [Deno Sandbox vs Together Code Sandbox](https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.md)\n- [Deno Sandbox vs Vercel Sandbox](https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs DeltaBox Lite](https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.md)\n- [Agent 37 Cloud vs Deno Sandbox](https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.md)\n- [DeltaBox Lite vs E2B](https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.md)\n- [DeltaBox Lite vs Freestyle](https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.md)\n- [DeltaBox Lite vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.md)\n- [DeltaBox Lite vs Modal Sandboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.md)\n- [DeltaBox Lite vs Morph Cloud](https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n- [DeltaBox Lite vs SPACE](https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.md)\n- [DeltaBox Lite vs Runloop Devboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.md)\n- [DeltaBox Lite vs Sprites](https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.md)\n- [DeltaBox Lite vs Together Code Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.md)\n- [DeltaBox Lite vs Vercel Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DeltaBox Lite vs Deno Sandbox", "url": "" } ], "description": "DeltaBox Lite scores 52.3 (D) to Deno Sandbox's 50.3 (D) for sandbox fs. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DeltaBox Lite D 52.3", "Deno Sandbox D 50.3", "scores" ], "h1": "DeltaBox Lite vs Deno Sandbox", "image": "https://www.anchorterminal.com/assets/og/compare-deltabox-lite-vs-deno-sandbox.png", "path": "/compare/deltabox-lite-vs-deno-sandbox", "published": "2026-10-01", "section": "tools", "title": "DeltaBox Lite vs Deno Sandbox for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox" }, "tokens": { "markdown": 2800, "slim": 730 }, "version": 1 }