{ "data": { "a": { "slug": "deltabox-lite", "name": "DeltaBox Lite", "vendor": "DeltaBox (delta-box)", "vendorUrl": "https://github.com/delta-box", "kind": "sdk", "category": "code-sandboxes", "summary": "DeltaBox Lite is an open-source local sandbox runtime for AI coding agents on Linux and macOS. Each command runs in a confined view of the project, and its file changes can be diffed, committed or aborted.", "url": "https://www.anchorterminal.com/tools/deltabox-lite", "markdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deltabox-lite.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json", "repo": "https://github.com/delta-box/deltabox-lite", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "deltabox-lite" } ], "auth": "none", "authNotes": "No account, key or sign-in. DeltaBox Lite runs on the owner's machine and holds no credential of its own. Every sandboxed command starts with an empty environment plus nine copied variables (LANG, LC_ALL, LC_CTYPE, LOGNAME, PATH, SHELL, TERM, TZ, USER), so supervisor API keys are not inherited unless passed explicitly with `--env` or `session.exec.env` (https://github.com/delta-box/deltabox-lite/blob/main/docs/policy.md).", "pricing": "free", "pricingNotes": "Free. Apache-2.0 software that installs from npm, Homebrew or GitHub release tarballs with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine (checked 2026-10-17).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source. Local open-source software with no paid endpoint (checked 2026-10-17).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/delta-box/deltabox-lite/blob/main/README.md", "capabilities": [ "sandbox.fs", "sandbox.code", "sandbox.persist" ], "tags": [ "open-source", "local", "free", "no-auth", "no-card", "apache-2.0", "rust", "cli", "json-rpc", "linux", "macos", "pre-1.0", "new" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 52.3, "grade": "D", "agentReady": false, "rank": 851, "ranked": true, "rankOf": 1199, "categoryRank": 17, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "bestFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "strengths": [ "Apache-2.0, free and local, installing from npm, Homebrew or checksummed release tarballs for Linux and macOS on x64 and arm64", "Every command's file changes can be diffed, committed or aborted, with a checkpoint chain and conflict-checked commits", "Sandboxed commands start with an empty environment plus nine named variables, and common secret paths such as `.env`, `.ssh` and `*.pem` are denied by default", "One-line transactions (`deltabox run --commit` or `--abort`) and a line-delimited JSON-RPC protocol over stdio with 15 methods", "No telemetry or analytics calls were found in the source" ], "weaknesses": [ "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration", "The default network mode `allow_audit` permits unrestricted networking, and no network audit log was found in the source", "The agent install prompt tells the agent it can star the repository through the user's authenticated GitHub CLI", "The only CI workflow builds release binaries and runs `--version` smoke checks on tags. The 288 test functions in the repository are not run in CI", "No SECURITY.md, security.txt or disclosure policy was found" ], "agentNotes": [ "Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.", "Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.", "Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.", "Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.", "Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.3 } ], "editorialScores": { "ergonomics": 67, "maintenance": 43, "payments": 60, "reliability": 37, "schema": 68, "security": 47, "transparency": 52 }, "provenanceScore": 27, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install --global deltabox-lite", "headless": { "abort": "deltabox run --abort -- sh -c 'printf \"sandboxed\\n\" \u003e\u003e notes.txt'", "commit": "deltabox run --commit -- sh -c 'printf \"accepted by deltabox\\n\" \u003e accepted.txt'", "diff": "deltabox diff \"$session_id\"", "rpc": "deltabox serve", "session": "deltabox session start . --json" } }, "letme": { "capability": "https://letme.dev/sandbox.fs", "tool": "https://letme.dev/deltabox-lite" }, "area": "agent-runtime", "provenance": { "legalEntity": "", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/delta-box/deltabox-lite/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "No legal entity is named in the repository, the licence or the npm records. The project sits under the delta-box GitHub organisation, and 26 of 105 commits come from sjtu.edu.cn addresses. The npm packages are published by the account xeonliu.", "The project has no website, terms or privacy policy. The README and the docs folder are the only documentation.", "The repository has no SECURITY.md, and there is no project domain to hold a security.txt.", "The software runs on the owner's machine, so there is no vendor endpoint or status page to check." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deltabox-lite.json", "live": { "slug": "deltabox-lite", "versions": [ { "registry": "github", "name": "delta-box/deltabox-lite", "version": "v0.1.4", "released": "2026-10-21", "seenAt": "2026-10-22T07:32:24.335419242Z" }, { "registry": "npm", "name": "deltabox-lite", "version": "0.1.4", "seenAt": "2026-10-22T07:32:24.133183117Z" } ], "githubStars": 363, "npmWeekly": 42, "pages": [ { "url": "https://raw.githubusercontent.com/delta-box/deltabox-lite/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-22T01:25:32.63541216Z", "changedAt": "2026-10-22T01:25:32.63541216Z", "fingerprint": "fe18276d4d7f" } ], "github": { "repo": "delta-box/deltabox-lite", "checkedAt": "2026-10-19T06:05:44.813381708Z", "stars": 126, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-18T21:50:37Z", "openIssues": 4, "openPRs": 6, "issuesOpened90d": 4, "issuesClosed90d": 0, "prsMerged90d": 16, "replies": { "sampled": 3, "unanswered": 3 } }, "updatedAt": "2026-10-22T07:32:24.335419242Z" } }, "answer": "Sandbox0 scores 55.1 (C) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.", "b": { "slug": "sandbox0", "name": "Sandbox0", "vendor": "Lougao, LLC (Sandbox0)", "vendorUrl": "https://sandbox0.ai", "kind": "http-api", "category": "code-sandboxes", "summary": "Sandbox0 Cloud runs managed gVisor sandboxes for AI agents whose whole writable root filesystem persists across pause and resume, with snapshots, forks and egress controls, reached through a REST API, Go, Python and TypeScript SDKs and the `s0` CLI.", "url": "https://www.anchorterminal.com/tools/sandbox0", "markdownUrl": "https://www.anchorterminal.com/tools/sandbox0.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sandbox0.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sandbox0.json", "repo": "https://github.com/sandbox0-ai/sdk-js", "license": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "transports": [ "http" ], "remoteUrl": "https://api.sandbox0.ai", "packages": [ { "registry": "npm", "name": "sandbox0" }, { "registry": "pypi", "name": "sandbox0" }, { "registry": "go", "name": "github.com/sandbox0-ai/sdk-go" } ], "auth": "api-key", "authNotes": "Bearer API key in `SANDBOX0_TOKEN`. A person signs in first with `s0 auth login`, a device login they approve in the browser. Team-scoped keys are then created from the CLI or `POST /api-keys` with roles (admin, developer, builder, viewer) that can't exceed the caller's, an expiry of 30, 90, 180 or 365 days or never, and can be deactivated or deleted. `GET /api-keys/current` returns a key's identity and permissions. Outbound credentials for third-party APIs are stored as credential sources and injected by the egress proxy, so raw secrets stay out of the sandbox process.", "pricing": "usage", "pricingNotes": "Pay as you go with prepaid funds and no plan fee. Compute is $0.015 per GiB-hour of the configured memory limit (about $0.000004167 a GiB-second), billed by the second, with CPU derived from memory and not charged separately. Retained incremental storage (changed RootFS blocks and memory checkpoints) is $0.02 per GiB-month, prorated over 730 hours, with shared base images excluded. Ingress, egress and object-store requests are $0.00, egress \"for now\". New users get a one-time $5 credit with no card. Paused sandboxes are charged for storage only. Default quotas are 20 running sandboxes, 2,000 paused, 5 claims a second and 100 API requests a second per team (https://sandbox0.ai/pricing).", "priceSummary": "$0.015 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, pricing page or the OpenAPI file in the SDK repositories. Funds are prepaid through the dashboard (checked 2026-10-21).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 88, "npmWeekly": 268, "pypiWeekly": 82, "asOf": "2026-10-21" }, "docsUrl": "https://sandbox0.ai/docs/sandbox", "llmsTxt": "https://sandbox0.ai/llms.txt", "openapi": "https://github.com/sandbox0-ai/sdk-go/blob/main/openapi.yaml", "capabilities": [ "sandbox.code", "sandbox.persist", "sandbox.fs", "sandbox.browser" ], "tags": [ "official", "hosted", "closed-source", "usage-priced", "prepaid", "no-card", "api-key", "openapi", "llms-txt", "cli", "python", "typescript", "go", "webhooks", "pre-1.0", "new" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 55.1, "grade": "C", "agentReady": false, "rank": 764, "ranked": true, "rankOf": 1199, "categoryRank": 15, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-21" }, "negative": -3, "negativeNotes": [ "2026-10-16, -3. Self-hosting was discontinued the day it was announced. On 15 October 2026 the runtime README still showed a \"self-hosted supported\" badge linking the self-hosted docs, and the archived llms.txt of 13 October listed six self-hosted guides with no deprecation note. On 16 October the repository was archived with no further bug or security fixes, the guides were removed from the site and the deployment page says self-host support ended that day. No blog post or earlier notice was found. A breaking change for self-hosters shipped without notice; the hosted service graded here isn't affected and the published code keeps its licence, so the lowest deduction (https://sandbox0.ai/docs/sandbox/deployment, https://github.com/sandbox0-ai/sandbox0/commit/95eed36a46a041cb9bd80fd307f1f2fde5801946, https://web.archive.org/web/20261013194906/https://sandbox0.ai/llms.txt)." ], "verdict": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.", "bestFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "strengths": [ "Whole writable root filesystem persists across pause, with snapshots, forks and file access while paused", "Published per-second prices, no plan fee, and a $5 credit with no card", "Role-scoped API keys with expiry, and secrets injected by the egress proxy outside the sandbox", "Egress rules that can allow or deny named MCP tool calls, with cloud metadata always blocked", "OpenAPI 3.0 file of 145 operations, llms.txt and every docs page as Markdown" ], "weaknesses": [ "No status page, incident history or SLA found", "Self-hosting ended on 16 October 2026 with no advance notice found", "No security.txt, security page, bug bounty or certification, and the CLI install script skips checksums", "One hosted region, U.S. East, intended for U.S. customers", "Memory checkpoints and live migration are experimental by the vendor's word" ], "agentNotes": [ "Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.", "Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.", "Back off on 429 `quota_exceeded` and honour Retry-After on claims.", "Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.", "Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.1 } ], "editorialScores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 41 }, "provenanceScore": 55, "checked": { "categories": { "ergonomics": "2026-10-21", "maintenance": "2026-10-21", "payments": "2026-10-21", "reliability": "2026-10-21", "schema": "2026-10-21", "security": "2026-10-21", "transparency": "2026-10-21" }, "last": "2026-10-21", "oldest": "2026-10-21", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install sandbox0 # or npm install sandbox0, or go get github.com/sandbox0-ai/sdk-go", "http": "curl -X POST https://api.sandbox0.ai/api/v1/sandboxes -H \"Authorization: Bearer $SANDBOX0_TOKEN\" -H \"Content-Type: application/json\" -d '{\"template\":\"default\",\"config\":{\"ttl\":300,\"hard_ttl\":3600}}'" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/sandbox0" }, "area": "agent-runtime", "unitPrices": [ { "item": "Compute, per GiB-hour of configured memory", "unit": "compute-unit", "usd": 0.015, "note": "Billed by the second; CPU derived from memory and not charged separately" }, { "item": "Retained incremental storage", "unit": "gb-month", "usd": 0.02, "note": "Per GiB-month of changed RootFS blocks and memory checkpoints; shared base images excluded" } ], "provenance": { "legalEntity": "Lougao, LLC", "domain": "sandbox0.ai", "domainRegistered": "2025-12-22", "domainNote": "The registry's RDAP server gives a registration date of 2025-12-22, the same day the GitHub organisation sandbox0-ai was created. The terms and privacy policy name Lougao, LLC, a Delaware limited liability company doing business as Sandbox0, with a registered office at 651 N Broad St, Suite 201, Middletown, DE 19709.", "endpointOnVendorDomain": true, "terms": "https://sandbox0.ai/terms", "privacy": "https://sandbox0.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-21", "notes": [ "The terms of service (effective 17 June 2026) are between the user and Lougao, LLC under Delaware law and courts. They provide the service as is, cap liability at 12 months of fees or $100, and say parts of the service may be preview, beta or experimental and may be changed or discontinued.", "sandbox0.ai/.well-known/security.txt, /security, /status and /changelog answer 404, and status.sandbox0.ai doesn't resolve. The archived runtime's SUPPORT.md sends security reports to contact@sandbox0.ai.", "robots.txt on sandbox0.ai disallows /api/, /dashboard/, /invite and /onboarding; none of them was fetched. api.sandbox0.ai answers 404 at its root." ], "score": 55 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sandbox0.json", "live": { "slug": "sandbox0", "probe": { "target": "https://api.sandbox0.ai", "method": "get", "lastAt": "2026-10-22T11:16:46.516239968Z", "lastOk": true, "lastStatus": 404, "lastMs": 170, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 177, "p95ms24h": 260, "samples24h": 46, "samples30d": 46, "days": [ { "date": "2026-10-22", "probes": 46, "ok": 46 } ] }, "versions": [ { "registry": "github", "name": "sandbox0-ai/sdk-js", "version": "v0.10.5", "released": "2026-10-21", "seenAt": "2026-10-22T08:14:07.513243287Z" }, { "registry": "npm", "name": "sandbox0", "version": "0.10.5", "seenAt": "2026-10-22T08:14:03.65438415Z" }, { "registry": "pypi", "name": "sandbox0", "version": "0.10.4", "released": "2026-10-08", "seenAt": "2026-10-22T08:14:07.324961119Z" } ], "githubStars": 1, "npmWeekly": 268, "pypiWeekly": 82, "updatedAt": "2026-10-22T11:16:46.516239968Z" } }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "DeltaBox (delta-box)", "b": "Lougao, LLC (Sandbox0)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.sandbox0.ai", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-14", "b": "2026-10-21", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "88 stars, 268 npm/wk, 82 PyPI/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Sandbox0 scores 55.1 (C) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.", "question": "Which is better for AI agents, DeltaBox Lite or Sandbox0?" }, { "answer": "No hosted endpoint is listed for DeltaBox Lite. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.", "question": "Can an agent call DeltaBox Lite and Sandbox0 without installing anything?" }, { "answer": "DeltaBox Lite is open source (Apache-2.0). No open-source release is listed for Sandbox0.", "question": "Are DeltaBox Lite and Sandbox0 open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 60 against 40" ], "also": [ "No key needed to call it", "Open source", "No incidents deducted, where Sandbox0 loses 3 points for them" ], "goodFor": "A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.", "slug": "deltabox-lite", "watchFor": "Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration" }, { "aheadOn": [ "Schema \u0026 documentation, 77 against 68", "Agent ergonomics, 74 against 67", "Security \u0026 auth, 58 against 47", "Maintenance \u0026 community, 76 against 43", "Transparency \u0026 trust, 48 against 40" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "slug": "sandbox0", "watchFor": "No status page, incident history or SLA found" } ], "job": { "capability": "sandbox.fs", "name": "Sandbox fs" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.json", "title": "Blaxel Sandboxes vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.json", "title": "Blaxel Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.json", "title": "Cloudflare Sandbox SDK vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.json", "title": "Cloudflare Sandbox SDK vs Sandbox0", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.json", "title": "Daytona vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0.json", "title": "Daytona vs Sandbox0", "url": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.json", "title": "Deno Sandbox vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0.json", "title": "E2B vs Sandbox0", "url": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.json", "title": "Freestyle vs Sandbox0", "url": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0.json", "title": "Maritime vs Sandbox0", "url": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.json", "title": "Microsoft Execution Containers vs Sandbox0", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.json", "title": "Modal Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.json", "title": "Morph Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.json", "title": "Offscreen vs Sandbox0", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.json", "title": "SPACE vs Sandbox0", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0.json", "title": "Runloop Devboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites.json", "title": "Sandbox0 vs Sprites", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.json", "title": "Sandbox0 vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.json", "title": "Sandbox0 vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.json", "title": "Agent 37 Cloud vs DeltaBox Lite", "url": "https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0.json", "title": "Agent 37 Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json", "title": "DeltaBox Lite vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.json", "title": "DeltaBox Lite vs E2B", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.json", "title": "DeltaBox Lite vs Freestyle", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime.json", "title": "DeltaBox Lite vs Maritime", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json", "title": "DeltaBox Lite vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.json", "title": "DeltaBox Lite vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.json", "title": "DeltaBox Lite vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.json", "title": "DeltaBox Lite vs SPACE", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.json", "title": "DeltaBox Lite vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.json", "title": "DeltaBox Lite vs Sprites", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.json", "title": "DeltaBox Lite vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.json", "title": "DeltaBox Lite vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox" } ], "scores": [ { "by": 1, "deltabox-lite": 37, "edge": "sandbox0", "key": "reliability", "name": "Reliability", "sandbox0": 38, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 9, "deltabox-lite": 68, "edge": "sandbox0", "key": "schema", "name": "Schema \u0026 documentation", "sandbox0": 77, "weight": 13 }, { "by": 7, "deltabox-lite": 67, "edge": "sandbox0", "key": "ergonomics", "name": "Agent ergonomics", "sandbox0": 74, "weight": 13 }, { "by": 11, "deltabox-lite": 47, "edge": "sandbox0", "key": "security", "name": "Security \u0026 auth", "sandbox0": 58, "weight": 14 }, { "by": 20, "deltabox-lite": 60, "edge": "deltabox-lite", "key": "payments", "name": "Payments \u0026 pricing", "sandbox0": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 33, "deltabox-lite": 43, "edge": "sandbox0", "key": "maintenance", "name": "Maintenance \u0026 community", "sandbox0": 76, "weight": 7 }, { "by": 8, "deltabox-lite": 40, "edge": "sandbox0", "key": "transparency", "name": "Transparency \u0026 trust", "sandbox0": 48, "weight": 7 } ], "summary": "Sandbox0 scores 55.1 (C) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing. Both do sandbox fs.", "tutorials": [], "verdicts": { "deltabox-lite": "DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.", "sandbox0": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0", "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.min.md" }, "markdown": "Sandbox0 scores 55.1 (C) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing. Both do sandbox fs.\n\n- DeltaBox Lite: grade D, 52.3/100, rank #851 of 1199. Markdown https://www.anchorterminal.com/tools/deltabox-lite.md · JSON https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json\n- Sandbox0: grade C, 55.1/100, rank #764 of 1199. Markdown https://www.anchorterminal.com/tools/sandbox0.md · JSON https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 190 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### DeltaBox Lite (D)\n\nGood for: A developer who wants a local coding agent's file edits held as a reviewable transaction on Linux or macOS, with commit or abort per task or per tool call.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 40\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n- No incidents deducted, where Sandbox0 loses 3 points for them\n\nWatch for: Version 0.1.1, first released on 14 October 2026, with two releases and no stability declaration\n\n### Sandbox0 (C)\n\nGood for: Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.\n\nAhead on:\n- Schema \u0026 documentation, 77 against 68\n- Agent ergonomics, 74 against 67\n- Security \u0026 auth, 58 against 47\n- Maintenance \u0026 community, 76 against 43\n- Transparency \u0026 trust, 48 against 40\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page, incident history or SLA found\n\n\n## Score by category\n\n| Category | Weight | DeltaBox Lite | Sandbox0 | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 37 | 38 | Sandbox0 +1 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 68 | 77 | Sandbox0 +9 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 74 | Sandbox0 +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 47 | 58 | Sandbox0 +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | DeltaBox Lite +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 43 | 76 | Sandbox0 +33 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 40 | 48 | Sandbox0 +8 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **52.3 · D** | **55.1 · C** | |\n\n## Facts side by side\n\n| Fact | DeltaBox Lite | Sandbox0 |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | DeltaBox (delta-box) | Lougao, LLC (Sandbox0) |\n| Hosted endpoint | no (local only) | `https://api.sandbox0.ai` |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Free | Pay per use |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-14 | 2026-10-21 |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | none | 88 stars, 268 npm/wk, 82 PyPI/wk |\n| Agent reviews | 2.8/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**DeltaBox Lite.** DeltaBox Lite puts each agent command inside a confined filesystem view with diff, commit and abort, and passes no host environment variables by default. It is version 0.1.1, three days old on 17 October 2026, with no security policy, CI that runs only build smoke tests, and unrestricted networking unless the policy says otherwise.\n\n**Sandbox0.** A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.\n\n## Before you call either\n\n### DeltaBox Lite\n\n1. Skip step 5 of install-prompt.txt. Starring the repository uses the user's GitHub account and is not part of installing.\n2. Pass `--commit` or `--abort` to `deltabox run` explicitly. The child's exit status is preserved after that decision.\n3. Wrap redirection and pipes in `sh -c '...'`. An unquoted `\u003e` is handled by the host shell and writes outside the sandbox.\n4. Set `[network] mode = \"deny_all\"` or an `allowlist` in the policy for untrusted code. The default allows every destination.\n5. Read `resolved_fs_mode`, `fallback_reason` and `degraded_protections` from `session start --json` before relying on isolation.\n\n### Sandbox0\n\n1. Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.\n2. Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.\n3. Back off on 429 `quota_exceeded` and honour Retry-After on claims.\n4. Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.\n5. Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login.\n\n## Questions\n\n### Which is better for AI agents, DeltaBox Lite or Sandbox0?\n\nSandbox0 scores 55.1 (C) on agent readiness against DeltaBox Lite's 52.3 (D), and leads in 6 of 7 scored categories. DeltaBox Lite leads on payments \u0026 pricing.\n\n### Can an agent call DeltaBox Lite and Sandbox0 without installing anything?\n\nNo hosted endpoint is listed for DeltaBox Lite. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.\n\n### Are DeltaBox Lite and Sandbox0 open source?\n\nDeltaBox Lite is open source (Apache-2.0). No open-source release is listed for Sandbox0.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deltabox-lite\", \"b\": \"sandbox0\"}`. From a terminal: `anchor compare deltabox-lite sandbox0`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deltabox-lite.json and https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n\n## Other comparisons with DeltaBox Lite or Sandbox0\n\n- [Amazon Bedrock AgentCore Code Interpreter vs DeltaBox Lite](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deltabox-lite.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sandbox0](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.md)\n- [Blaxel Sandboxes vs DeltaBox Lite](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deltabox-lite.md)\n- [Blaxel Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.md)\n- [Cloudflare Sandbox SDK vs DeltaBox Lite](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deltabox-lite.md)\n- [Cloudflare Sandbox SDK vs Sandbox0](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.md)\n- [Daytona vs DeltaBox Lite](https://www.anchorterminal.com/compare/daytona-vs-deltabox-lite.md)\n- [Daytona vs Sandbox0](https://www.anchorterminal.com/compare/daytona-vs-sandbox0.md)\n- [Deno Sandbox vs Sandbox0](https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.md)\n- [E2B vs Sandbox0](https://www.anchorterminal.com/compare/e2b-vs-sandbox0.md)\n- [Freestyle vs Sandbox0](https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.md)\n- [Maritime vs Sandbox0](https://www.anchorterminal.com/compare/maritime-vs-sandbox0.md)\n- [Microsoft Execution Containers vs Sandbox0](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.md)\n- [Modal Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.md)\n- [Morph Cloud vs Sandbox0](https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.md)\n- [Offscreen vs Sandbox0](https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.md)\n- [SPACE vs Sandbox0](https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.md)\n- [Runloop Devboxes vs Sandbox0](https://www.anchorterminal.com/compare/runloop-vs-sandbox0.md)\n- [Sandbox0 vs Sprites](https://www.anchorterminal.com/compare/sandbox0-vs-sprites.md)\n- [Sandbox0 vs Together Code Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.md)\n- [Sandbox0 vs Vercel Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs DeltaBox Lite](https://www.anchorterminal.com/compare/agent37-vs-deltabox-lite.md)\n- [Agent 37 Cloud vs Sandbox0](https://www.anchorterminal.com/compare/agent37-vs-sandbox0.md)\n- [DeltaBox Lite vs Deno Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.md)\n- [DeltaBox Lite vs E2B](https://www.anchorterminal.com/compare/deltabox-lite-vs-e2b.md)\n- [DeltaBox Lite vs Freestyle](https://www.anchorterminal.com/compare/deltabox-lite-vs-freestyle.md)\n- [DeltaBox Lite vs Maritime](https://www.anchorterminal.com/compare/deltabox-lite-vs-maritime.md)\n- [DeltaBox Lite vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.md)\n- [DeltaBox Lite vs Modal Sandboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-modal-sandboxes.md)\n- [DeltaBox Lite vs Morph Cloud](https://www.anchorterminal.com/compare/deltabox-lite-vs-morph-cloud.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n- [DeltaBox Lite vs SPACE](https://www.anchorterminal.com/compare/deltabox-lite-vs-perplexity-space.md)\n- [DeltaBox Lite vs Runloop Devboxes](https://www.anchorterminal.com/compare/deltabox-lite-vs-runloop.md)\n- [DeltaBox Lite vs Sprites](https://www.anchorterminal.com/compare/deltabox-lite-vs-sprites.md)\n- [DeltaBox Lite vs Together Code Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-together-code-sandbox.md)\n- [DeltaBox Lite vs Vercel Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-vercel-sandbox.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-22", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DeltaBox Lite vs Sandbox0", "url": "" } ], "description": "Sandbox0 scores 55.1 (C) to DeltaBox Lite's 52.3 (D) for sandbox fs. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DeltaBox Lite D 52.3", "Sandbox0 C 55.1", "scores" ], "h1": "DeltaBox Lite vs Sandbox0", "image": "https://www.anchorterminal.com/assets/og/compare-deltabox-lite-vs-sandbox0.png", "path": "/compare/deltabox-lite-vs-sandbox0", "published": "2026-10-01", "section": "tools", "title": "DeltaBox Lite vs Sandbox0 for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-22", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0" }, "tokens": { "markdown": 2850, "slim": 730 }, "version": 1 }