{ "data": { "a": { "slug": "deltabox-lite", "name": "DeltaBox Lite", "vendor": "DeltaBox (delta-box)", "vendorUrl": "https://github.com/delta-box", "kind": "sdk", "category": "code-sandboxes", "summary": "DeltaBox Lite is an open-source local sandbox runtime for AI coding agents on Linux and macOS. Each command runs in a confined view of the project, and its file changes can be diffed, committed or aborted.", "url": "https://www.anchorterminal.com/tools/deltabox-lite", "markdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json", "repo": "https://github.com/delta-box/deltabox-lite", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "deltabox-lite" } ], "auth": "none", "authNotes": "No account, key or sign-in. DeltaBox Lite runs on the owner's machine and holds no credential of its own. Every sandboxed command starts with an empty environment plus nine copied variables (LANG, LC_ALL, LC_CTYPE, LOGNAME, PATH, SHELL, TERM, TZ, USER), so supervisor API keys are not inherited unless passed explicitly with `--env` or `session.exec.env` (https://github.com/delta-box/deltabox-lite/blob/main/docs/policy.md).", "pricing": "free", "pricingNotes": "Free. Apache-2.0 software that installs from npm, Homebrew or GitHub release tarballs with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine (checked 2026-10-17).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source. Local open-source software with no paid endpoint (checked 2026-10-17).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/delta-box/deltabox-lite/blob/main/README.md", "capabilities": [ "sandbox.fs", "sandbox.code", "sandbox.persist" ], "tags": [ "open-source", "local", "free", "no-auth", "no-card", "apache-2.0", "rust", "cli", "json-rpc", "linux", "macos", "pre-1.0", "new" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 52.3, "grade": "D", "agentReady": false, "rank": 825, "ranked": true, "rankOf": 1133, "categoryRank": 15, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "bestFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "strengths": [ "Apache-2.0, free and local, installing from npm, Homebrew or checksummed release tarballs for Linux and macOS on x64 and arm64", "Every command's file changes can be diffed, committed or aborted, with a checkpoint chain and conflict-checked commits", "Sandboxed commands start with an empty environment plus nine named variables, and common secret paths such as `.env`, `.ssh` and `*.pem` are denied by default", "One-line transactions (`deltabox run --commit` or `--abort`) and a line-delimited JSON-RPC protocol over stdio with 15 methods", "No telemetry or analytics calls were found in the source" ], "weaknesses": [ "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration", "The default network mode `allow_audit` permits unrestricted networking, and no network audit log was found in the source", "The agent install prompt tells the agent it can star the repository through the user's authenticated GitHub CLI", "The only CI workflow builds release binaries and runs `--version` smoke checks on tags. The 288 test functions in the repository are not run in CI", "No SECURITY.md, security.txt or disclosure policy was found" ], "agentNotes": [ "Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.", "Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.", "Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.", "Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.", "Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.3 } ], "editorialScores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 52 }, "provenanceScore": 27 }, "connect": { "install": "npm install --global deltabox-lite", "headless": { "abort": "deltabox run --abort -- sh -c 'printf \"sandboxed\\n\" \u003e\u003e notes.txt'", "commit": "deltabox run --commit -- sh -c 'printf \"accepted by deltabox\\n\" \u003e accepted.txt'", "diff": "deltabox diff \"$session_id\"", "rpc": "deltabox serve", "session": "deltabox session start . --json" } }, "letme": { "capability": "https://letme.dev/sandbox.fs", "tool": "https://letme.dev/deltabox-lite" }, "area": "agent-runtime", "provenance": { "legalEntity": "", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/delta-box/deltabox-lite/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "No legal entity is named in the repository, the licence or the npm records. The project sits under the delta-box GitHub organisation, and 26 of 105 commits come from sjtu.edu.cn addresses. The npm packages are published by the account xeonliu.", "The project has no website, terms or privacy policy. The README and the docs folder are the only documentation.", "The repository has no SECURITY.md, and there is no project domain to hold a security.txt.", "The software runs on the owner's machine, so there is no vendor endpoint or status page to check." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deltabox-lite.json", "live": { "slug": "deltabox-lite", "pages": [ { "url": "https://raw.githubusercontent.com/delta-box/deltabox-lite/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:09:46.794533554Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0d8c10328fc8" } ], "updatedAt": "2026-10-17T23:09:46.794533554Z" } }, "answer": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "microsoft-execution-containers", "name": "Microsoft Execution Containers", "vendor": "Microsoft", "vendorUrl": "https://github.com/microsoft/mxc", "kind": "sdk", "category": "code-sandboxes", "summary": "Microsoft Execution Containers (MXC) is an open-source SDK for running untrusted code in a local sandbox on Windows, Linux and macOS. An application embeds it through Node.js, .NET or Rust and sets filesystem, network and UI policy for each run.", "url": "https://www.anchorterminal.com/tools/microsoft-execution-containers", "markdownUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json", "repo": "https://github.com/microsoft/mxc", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@microsoft/mxc-sdk" }, { "registry": "nuget", "name": "Microsoft.Mxc.Sdk" } ], "auth": "none", "authNotes": "No account, key or sign-in. MXC is a library the host application loads in its own process, so it holds no credential of its own. The workload runs with whatever the request grants. Network egress, ingress and host loopback resolve to `deny` when omitted, and filesystem access is limited to the `readonlyPaths` and `readwritePaths` the caller lists. On Windows the `isolation_session` backend creates a separate agent user account for each container and returns its name and SID.", "pricing": "free", "pricingNotes": "Free. The SDKs and native runtime are MIT and install from npm, NuGet and crates.io with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine. The Windows backends need Windows 11 at the builds listed in the repository (checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the SDK source. Local open-source software with no paid endpoint (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1506, "npmWeekly": 471674, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://github.com/microsoft/mxc/blob/main/docs/api-reference/README.md", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "sdk", "open-source", "local", "free", "no-auth", "no-card", "typescript", "dotnet", "rust", "windows", "linux", "macos", "json-schema", "new-1.0" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 76.3, "grade": "BB", "agentReady": true, "rank": 43, "ranked": true, "rankOf": 1133, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 92, "payments": 60, "reliability": 81, "schema": 81, "security": 69, "transparency": 83 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all.", "bestFor": "A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.", "strengths": [ "MIT licence, with SDKs for Node.js, .NET and Rust all at 1.0.1 and the native runtime bundled in the npm and NuGet packages", "Egress, ingress and host loopback default to `deny`, and filesystem access is limited to listed read-only and read-write paths", "A draft-07 JSON Schema for the stable 1.0.0 request, with descriptions on 135 of 150 properties", "Errors carry one of 12 typed codes plus an optional remediation, and `validate*` calls dry-run a request without creating a container", "Telemetry is opt-in, Windows-only and gated on user consent and an administrative policy that can only block it" ], "weaknesses": [ "1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased", "Enforcement differs by backend. `isolation_session` cannot restrict networking, and proxy routing is cooperative on Seatbelt and WSLC", "Persistent containers exist only for `isolation_session` and `wslc`, both on Windows", "On Windows the Node SDK runs a PATH-resolved `whoami` when it loads, reported on 24 September 2026 and still in the 1.0.1 source", "The npm package is 37.7 MB compressed, needs Node.js 24 or later, and carries no `repository` field or provenance attestation" ], "agentNotes": [ "Import from `@microsoft/mxc-sdk/v1`. The package root exports nothing.", "Call `getPlatformSupport()` first and stop if `isSupported` is false. `getAvailableBackends()` is advisory and launch-time validation still applies.", "Set `network.egress.default` to `allow` only when the task needs it. Omitted network policy resolves to deny in every direction.", "Never pass `--audit` to an executor for untrusted code. It turns off all sandbox security for the workload.", "Read `ExecutionResult.warnings` after each run. Security warnings arrive there and are not written to stdout or stderr." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76.3 } ], "editorialScores": { "ergonomics": 74, "maintenance": 92, "payments": 60, "reliability": 81, "schema": 81, "security": 69, "transparency": 86 }, "provenanceScore": 79 }, "connect": { "install": "npm install @microsoft/mxc-sdk" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/microsoft-execution-containers" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "copilot-studio-mcp", "power-automate", "foundry-local", "microsoft-decision-1", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph", "microsoft-graph-people" ], "area": "agent-runtime", "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://go.microsoft.com/fwlink/?linkid=521839", "statusPage": "", "changelog": "https://github.com/microsoft/mxc/releases", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The repository is under GitHub's microsoft organisation, `LICENSE.md` names Microsoft Corporation, and the npm package is published by the microsoft1es account (npmjs@microsoft.com).", "www.microsoft.com/.well-known/security.txt loads and points to the MSRC researcher portal, but its Expires field is 2026-09-23T16:00:00.000Z, which had passed on 8 October 2026.", "RDAP for microsoft.com gives a registration date of 1991-05-02.", "No terms page applies to the open-source SDK beyond the MIT licence. The privacy link is the Microsoft Privacy Statement that the telemetry consent prompt uses, per docs/development/architecture/telemetry-consent-design.md.", "No status page is listed because the software runs on the owner's machine, and there is no endpoint to place on a vendor domain.", "https://learn.microsoft.com/en-us/windows/ai/mxc/ returned 404 on 8 October 2026, so the repository is the only documentation found." ], "score": 79 }, "requirements": { "agentAlone": true, "card": "no", "freeTier": true, "credential": "none", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.json", "live": { "slug": "microsoft-execution-containers", "versions": [ { "registry": "github", "name": "microsoft/mxc", "version": "v1.0.1", "released": "2026-10-17", "seenAt": "2026-10-17T02:01:55.071880685Z" }, { "registry": "npm", "name": "@microsoft/mxc-sdk", "version": "1.0.1", "seenAt": "2026-10-17T02:01:54.220099289Z" } ], "githubStars": 2878, "npmWeekly": 317303, "securityTxt": { "url": "https://microsoft.com/.well-known/security.txt", "state": "expired", "expires": "2026-09-23T16:00:00.000Z", "checkedAt": "2026-10-17T15:52:11.285064686Z" }, "domain": { "domain": "microsoft.com", "registered": "1991-05-02", "source": "https://rdap.verisign.com/com/v1/domain/microsoft.com", "checkedAt": "2026-10-11T13:11:44.704195317Z" }, "pages": [ { "url": "https://go.microsoft.com/fwlink/?linkid=521839", "kind": "privacy", "status": 0, "checkedAt": "2026-10-17T23:03:42.797327957Z", "changedAt": "0001-01-01T00:00:00Z", "blockedByRobots": true } ], "updatedAt": "2026-10-17T23:03:42.797327957Z" } }, "facts": [ { "a": "SDK + MCP", "b": "SDK + MCP", "name": "Kind" }, { "a": "DeltaBox (delta-box)", "b": "Microsoft", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-14", "b": "2026-10-17", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "1.5k stars, 472k npm/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, DeltaBox Lite or Microsoft Execution Containers?" }, { "answer": "Yes. DeltaBox Lite is open source (Apache-2.0). Microsoft Execution Containers is open source (MIT).", "question": "Are DeltaBox Lite and Microsoft Execution Containers open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "slug": "deltabox-lite", "watchFor": "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration" }, { "aheadOn": [ "Reliability, 81 against 37", "Schema \u0026 documentation, 81 against 68", "Agent ergonomics, 74 against 67", "Security \u0026 auth, 69 against 47", "Maintenance \u0026 community, 92 against 43", "Transparency \u0026 trust, 83 against 40" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.", "slug": "microsoft-execution-containers", "watchFor": "1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased" } ], "job": { "capability": "sandbox.fs", "name": "Sandbox fs" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.json", "title": "Blaxel Sandboxes vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers.json", "title": "Blaxel Sandboxes vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.json", "title": "Cloudflare Sandbox SDK vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.json", "title": "Cloudflare Sandbox SDK vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.json", "title": "Daytona vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers.json", "title": "Daytona vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.json", "title": "Deno Sandbox vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.json", "title": "E2B vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.json", "title": "Freestyle vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes.json", "title": "Microsoft Execution Containers vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud.json", "title": "Microsoft Execution Containers vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.json", "title": "Microsoft Execution Containers vs Offscreen", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.json", "title": "Microsoft Execution Containers vs SPACE", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop.json", "title": "Microsoft Execution Containers vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites.json", "title": "Microsoft Execution Containers vs Sprites", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox.json", "title": "Microsoft Execution Containers vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.json", "title": "Microsoft Execution Containers vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.json", "title": "Agent 37 Cloud vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers.json", "title": "Agent 37 Cloud vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json", "title": "DeltaBox Lite vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.json", "title": "DeltaBox Lite vs E2B", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.json", "title": "DeltaBox Lite vs Freestyle", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.json", "title": "DeltaBox Lite vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.json", "title": "DeltaBox Lite vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.json", "title": "DeltaBox Lite vs SPACE", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.json", "title": "DeltaBox Lite vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.json", "title": "DeltaBox Lite vs Sprites", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.json", "title": "DeltaBox Lite vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.json", "title": "DeltaBox Lite vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox" } ], "scores": [ { "by": 44, "deltabox-lite": 37, "edge": "microsoft-execution-containers", "key": "reliability", "microsoft-execution-containers": 81, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 13, "deltabox-lite": 68, "edge": "microsoft-execution-containers", "key": "schema", "microsoft-execution-containers": 81, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 7, "deltabox-lite": 67, "edge": "microsoft-execution-containers", "key": "ergonomics", "microsoft-execution-containers": 74, "name": "Agent ergonomics", "weight": 13 }, { "by": 22, "deltabox-lite": 47, "edge": "microsoft-execution-containers", "key": "security", "microsoft-execution-containers": 69, "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "deltabox-lite": 60, "edge": "", "key": "payments", "microsoft-execution-containers": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 49, "deltabox-lite": 43, "edge": "microsoft-execution-containers", "key": "maintenance", "microsoft-execution-containers": 92, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 43, "deltabox-lite": 40, "edge": "microsoft-execution-containers", "key": "transparency", "microsoft-execution-containers": 83, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. Both do sandbox fs.", "tutorials": [], "verdicts": { "deltabox-lite": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "microsoft-execution-containers": "MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers", "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.min.md" }, "markdown": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. Both do sandbox fs.\n\n- DeltaBox Lite: grade D, 52.3/100, rank #825 of 1133. Markdown https://www.anchorterminal.com/tools/deltabox-lite.md · JSON https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json\n- Microsoft Execution Containers: grade BB, 76.3/100, rank #43 of 1133. Markdown https://www.anchorterminal.com/tools/microsoft-execution-containers.md · JSON https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 153 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### DeltaBox Lite (D)\n\nGood for: A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.\n\nWatch for: Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration\n\n### Microsoft Execution Containers (BB)\n\nGood for: A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.\n\nAhead on:\n- Reliability, 81 against 37\n- Schema \u0026 documentation, 81 against 68\n- Agent ergonomics, 74 against 67\n- Security \u0026 auth, 69 against 47\n- Maintenance \u0026 community, 92 against 43\n- Transparency \u0026 trust, 83 against 40\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: 1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased\n\n\n## Score by category\n\n| Category | Weight | DeltaBox Lite | Microsoft Execution Containers | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 37 | 81 | Microsoft Execution Containers +44 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 68 | 81 | Microsoft Execution Containers +13 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 74 | Microsoft Execution Containers +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 47 | 69 | Microsoft Execution Containers +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 43 | 92 | Microsoft Execution Containers +49 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 40 | 83 | Microsoft Execution Containers +43 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **52.3 · D** | **76.3 · BB** | |\n\n## Facts side by side\n\n| Fact | DeltaBox Lite | Microsoft Execution Containers |\n| --- | --- | --- |\n| Kind | SDK + MCP | SDK + MCP |\n| Vendor | DeltaBox (delta-box) | Microsoft |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Read-only variant documented | no | yes |\n| llms.txt | no | no |\n| Last release | 2026-10-14 | 2026-10-17 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | couldn't be read |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | none | 1.5k stars, 472k npm/wk |\n| Agent reviews | 2.8/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**DeltaBox Lite.** DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.\n\n**Microsoft Execution Containers.** MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all.\n\n## Before you call either\n\n### DeltaBox Lite\n\n1. Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.\n2. Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.\n3. Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.\n4. Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.\n5. Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation.\n\n### Microsoft Execution Containers\n\n1. Import from `@microsoft/mxc-sdk/v1`. The package root exports nothing.\n2. Call `getPlatformSupport()` first and stop if `isSupported` is false. `getAvailableBackends()` is advisory and launch-time validation still applies.\n3. Set `network.egress.default` to `allow` only when the task needs it. Omitted network policy resolves to deny in every direction.\n4. Never pass `--audit` to an executor for untrusted code. It turns off all sandbox security for the workload.\n5. Read `ExecutionResult.warnings` after each run. Security warnings arrive there and are not written to stdout or stderr.\n\n## Questions\n\n### Which is better for AI agents, DeltaBox Lite or Microsoft Execution Containers?\n\nMicrosoft Execution Containers scores 76.3 (BB) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories.\n\n### Are DeltaBox Lite and Microsoft Execution Containers open source?\n\nYes. DeltaBox Lite is open source (Apache-2.0). Microsoft Execution Containers is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deltabox-lite\", \"b\": \"microsoft-execution-containers\"}`. From a terminal: `anchor compare deltabox-lite microsoft-execution-containers`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json and https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json\n\n## Other comparisons with DeltaBox Lite or Microsoft Execution Containers\n\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.md)\n- [Blaxel Sandboxes vs DeltaBox Lite](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.md)\n- [Blaxel Sandboxes vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers.md)\n- [Cloudflare Sandbox SDK vs DeltaBox Lite](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.md)\n- [Cloudflare Sandbox SDK vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.md)\n- [Daytona vs DeltaBox Lite](https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.md)\n- [Daytona vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers.md)\n- [Deno Sandbox vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.md)\n- [E2B vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.md)\n- [Freestyle vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.md)\n- [Microsoft Execution Containers vs Modal Sandboxes](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes.md)\n- [Microsoft Execution Containers vs Morph Cloud](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud.md)\n- [Microsoft Execution Containers vs Offscreen](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.md)\n- [Microsoft Execution Containers vs SPACE](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.md)\n- [Microsoft Execution Containers vs Runloop Devboxes](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop.md)\n- [Microsoft Execution Containers vs Sprites](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites.md)\n- [Microsoft Execution Containers vs Together Code Sandbox](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox.md)\n- [Microsoft Execution Containers vs Vercel Sandbox](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs DeltaBox Lite](https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.md)\n- [Agent 37 Cloud vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers.md)\n- [DeltaBox Lite vs Deno Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.md)\n- [DeltaBox Lite vs E2B](https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.md)\n- [DeltaBox Lite vs Freestyle](https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.md)\n- [DeltaBox Lite vs Modal Sandboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.md)\n- [DeltaBox Lite vs Morph Cloud](https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n- [DeltaBox Lite vs SPACE](https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.md)\n- [DeltaBox Lite vs Runloop Devboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.md)\n- [DeltaBox Lite vs Sprites](https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.md)\n- [DeltaBox Lite vs Together Code Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.md)\n- [DeltaBox Lite vs Vercel Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DeltaBox Lite vs Microsoft Execution Containers", "url": "" } ], "description": "Microsoft Execution Containers scores 76.3 (BB) to DeltaBox Lite's 52.3 (D) for sandbox fs. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DeltaBox Lite D 52.3", "Microsoft Execution Containers BB 76.3", "scores" ], "h1": "DeltaBox Lite vs Microsoft Execution Containers", "image": "https://www.anchorterminal.com/assets/og/compare-deltabox-lite-vs-microsoft-execution-containers.png", "path": "/compare/deltabox-lite-vs-microsoft-execution-containers", "published": "2026-10-01", "section": "tools", "title": "DeltaBox Lite vs Microsoft Execution Containers for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers" }, "tokens": { "markdown": 2900, "slim": 580 }, "version": 1 }