{ "data": { "a": { "slug": "deno-sandbox", "name": "Deno Sandbox", "vendor": "Deno Land Inc.", "vendorUrl": "https://deno.com", "kind": "http-api", "category": "code-sandboxes", "summary": "Deno Sandbox runs Linux microVMs on Deno Deploy for untrusted or AI-generated code. It is driven from the `@deno/sandbox` JavaScript SDK, the `deno-sandbox` Python SDK or the `deno sandbox` CLI, and launched in beta on 3 February 2026.", "url": "https://www.anchorterminal.com/tools/deno-sandbox", "markdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json", "repo": "https://github.com/denoland/sandbox-py", "license": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@deno/sandbox" }, { "registry": "pypi", "name": "deno-sandbox" } ], "auth": "api-key", "authNotes": "An organisation access token (prefix `ddo_`) created under Settings in console.deno.com, read by the SDKs from `DENO_DEPLOY_TOKEN` and sent as a Bearer token. The same token manages the organisation's Deno Deploy apps. No scopes or expiry were found in the reviewed docs, the docs say to rotate a leaked token from the dashboard, and all organisation members hold owner permissions. Signup is in a browser.", "pricing": "paid", "pricingNotes": "Sandboxes need the Pro plan ($20 a month) or above, and the Free plan does not include them. Compute bills through the Deploy meters at $0.10 a CPU-hour and $0.025 a GiB-hour of memory beyond the plan's allowance (50 CPU-hours and 750 GiB-hours on Pro), and volume storage at $0.20 a GiB-month beyond 5 GiB on Pro. Spend limits can be set on paid plans (https://deno.com/deploy/pricing, checked 2026-10-08).", "priceSummary": "$0.10 / vCPU-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the sandbox docs, the pricing page or the OpenAPI document (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 6, "npmWeekly": 1971, "pypiWeekly": 31729, "asOf": "2026-10-08" }, "docsUrl": "https://docs.deno.com/sandbox/", "llmsTxt": "https://docs.deno.com/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "paid", "beta", "microvm", "typescript", "python", "cli", "llms-txt", "status-page", "enterprise" ], "lastRelease": "2026-07-22", "graded": true, "anchor": { "graded": true, "score": 50.3, "grade": "D", "agentReady": false, "rank": 873, "ranked": true, "rankOf": 1133, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -2, "negativeNotes": [ "2026-10-08: the Create page (last modified 28 January 2026) says a default sandbox has no outbound network access, while the Security page of the same date says outbound access is unrestricted unless `allowNet` is set. A reader of the first page would leave egress open. 2 points. https://docs.deno.com/sandbox/create/ and https://docs.deno.com/sandbox/security/" ], "verdict": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.", "bestFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "strengths": [ "Secrets are held outside the VM. Code sees a placeholder, and the real value is substituted only on requests to hosts named for that secret", "`allowNet` restricts outbound traffic to listed hostnames, wildcard subdomains, ports or IP addresses", "Each sandbox is a Firecracker microVM per the product page, with 2 vCPUs, 768 MB to 4 GB of memory and 10 GB of disk", "Volumes of 300 MB to 20 GB persist between sandboxes, and read-only snapshots of a volume can boot new sandboxes", "Unit prices are public, $0.10 a CPU-hour, $0.025 a GiB-hour of memory and $0.20 a GiB-month of volume storage" ], "weaknesses": [ "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found", "Sandboxes are not included in the Free plan. Access starts at Pro, $20 a month, after a browser signup", "The published OpenAPI document at `api.deno.com/v2/openapi.json` has 34 operations and none for sandboxes, volumes or snapshots", "The Create page says a default sandbox has no outbound network access, and the Security page says outbound access is unrestricted by default", "Maximum lifetime is 30 minutes, volumes exist only in `ord`, and no API rate limits or 429 guidance were found", "Organisation tokens carry no scopes in the reviewed docs, and every organisation member has owner permissions" ], "agentNotes": [ "Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above", "Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted", "Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder", "The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes", "Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region", "`exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.3 } ], "editorialScores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 35 }, "provenanceScore": 80 }, "connect": { "install": "npm install @deno/sandbox # or pip install deno-sandbox" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/deno-sandbox" }, "area": "agent-runtime", "unitPrices": [ { "item": "Active CPU beyond plan allowance", "unit": "vcpu-hour", "usd": 0.1, "note": "Memory extra at $0.025 a GiB-hour" }, { "item": "Volume storage beyond plan allowance", "unit": "gb-month", "usd": 0.2, "note": "Priced per GiB" }, { "item": "Pro plan, the lowest that includes sandboxes", "unit": "month", "usd": 20, "note": "Includes 50 CPU-hours, 750 GiB-hours of memory and 5 GiB of volume storage" } ], "provenance": { "legalEntity": "Deno Land Inc.", "domain": "deno.com", "domainRegistered": "1999-03-09", "endpointOnVendorDomain": false, "terms": "https://docs.deno.com/deploy/terms_and_conditions/", "privacy": "https://docs.deno.com/deploy/privacy_policy/", "statusPage": "https://denostatus.com", "changelog": "https://docs.deno.com/deploy/changelog/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Deno Deploy terms and conditions (last modified 30 September 2026) name Deno Land Inc. and govern the Deploy services, of which Sandbox is a part. No separate sandbox terms were found.", "The privacy policy (last modified 30 September 2026) gives Deno Land Inc., 1111 6th Ave Ste 550, PMB 702973, San Diego CA 92101. A DPA is listed under Enterprise only, and no public copy was found.", "The Python SDK's default sandbox endpoint is `\u003cregion\u003e.sandbox-api.deno.net`, a second domain of the vendor's, while listing and volumes go through console.deno.com.", "deno.com/.well-known/security.txt gives deploy@deno.com and a policy link and has no Expires field, which RFC 9116 requires. It is recorded as valid to match other listings with the same gap. The policy page gives security@deno.com.", "RDAP for deno.com gives a registration date of 1999-03-09.", "The Deploy changelog's newest entry is dated 12 March 2026." ], "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deno-sandbox.json", "live": { "slug": "deno-sandbox", "vendorStatus": { "page": "https://denostatus.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:50:58.713580114Z" }, "versions": [ { "registry": "github", "name": "denoland/sandbox-py", "version": "v0.15.0", "released": "2026-03-13", "seenAt": "2026-10-17T01:44:22.771034137Z" }, { "registry": "npm", "name": "@deno/sandbox", "version": "0.13.2", "seenAt": "2026-10-17T01:44:21.668423649Z" }, { "registry": "pypi", "name": "deno-sandbox", "version": "0.16.0", "released": "2026-07-22", "seenAt": "2026-10-17T01:44:22.582876369Z" } ], "githubStars": 6, "npmWeekly": 1288, "pypiWeekly": 58487, "securityTxt": { "url": "https://deno.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-17T15:52:09.40813154Z" }, "llmsTxt": { "url": "https://docs.deno.com/llms.txt", "ok": false, "status": 500, "checkedAt": "2026-10-17T14:21:57.968203515Z" }, "domain": { "domain": "deno.com", "registered": "1999-03-09", "source": "https://rdap.verisign.com/com/v1/domain/deno.com", "checkedAt": "2026-10-11T13:24:23.955117671Z" }, "pages": [ { "url": "https://docs.deno.com/deploy/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-17T23:00:52.976436053Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "970657376187" }, { "url": "https://deno.com/deploy/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T22:58:32.949228029Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "32f3f605102d" }, { "url": "https://docs.deno.com/deploy/privacy_policy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-17T23:00:54.99425515Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8daa7ca4099e" }, { "url": "https://docs.deno.com/deploy/terms_and_conditions/", "kind": "terms", "status": 304, "checkedAt": "2026-10-17T23:00:56.989948353Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "95a600f10514" } ], "updatedAt": "2026-10-17T23:00:56.989948353Z" } }, "answer": "Offscreen scores 62.9 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "offscreen", "name": "Offscreen", "vendor": "Mark Phelps", "vendorUrl": "https://github.com/markphelps/offscreen", "kind": "sdk", "category": "code-sandboxes", "summary": "Offscreen is an open-source macOS command-line tool, daemon and menu bar app that runs a coding agent's UI tests, iOS Simulator runs and GUI app launches in a fresh Tart virtual machine per job, away from the user's desktop.", "url": "https://www.anchorterminal.com/tools/offscreen", "markdownUrl": "https://www.anchorterminal.com/tools/offscreen.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/offscreen.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/offscreen.json", "repo": "https://github.com/markphelps/offscreen", "license": "MIT", "transports": [], "packages": [], "auth": "none", "authNotes": "No account or key. The CLI talks to the local daemon over an owner-only Unix socket (mode 0600), and anyone who can open it is trusted. The daemon reaches each guest VM over SSH with the base image's login, `admin` and `admin` by default, or a configured key. A person grants Local Network to Offscreen Daemon on the first VM job, and Input Monitoring and Notifications to the menu bar app only for host-lane jobs.", "pricing": "free", "pricingNotes": "Free under MIT with nothing to buy. It depends on Tart, installed by the cask from the `openai/tools/tart` formula under FSL-1.1-ALv2, whose licensing page says use on personal computers is royalty-free and organisations above 100 host CPU cores need a paid licence, from $12,000 a year. Needs an Apple silicon Mac with macOS 14 or later and full Xcode.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the docs or the skill (checked 2026-10-17). The tool has no paid tier and makes no network calls of its own beyond the local socket and the guest SSH connection.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/markphelps/offscreen#readme", "capabilities": [ "sandbox.code", "sandbox.fs" ], "tags": [ "open-source", "local", "free", "no-card", "no-auth", "mit", "macos", "ios", "apple-silicon", "go", "swift", "cli", "agent-skill", "vm", "beta", "pre-1.0", "new" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 62.9, "grade": "B", "agentReady": false, "rank": 456, "ranked": true, "rankOf": 1133, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 66, "payments": 60, "reliability": 55, "schema": 67, "security": 62, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls.", "bestFor": "A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.", "strengths": [ "A fresh VM per job, deleted afterwards, and a VM task receives only the worktree, listed build products and four `OFFSCREEN_*` variables, not the host environment", "`offscreen run` exits with the wrapped command's code, and Offscreen's own failures use 75 for a queue timeout and 70 for daemon or VM errors", "One queue on the Mac for every agent, terminal and script, with `--detach`, `status`, `logs -f`, `artifacts` and `cancel`", "The skill lists what an agent must not run without asking, such as `--show`, the host lane, `--keep`, prune and image builds", "MIT, with no network code or telemetry found in the source beyond the local socket and guest SSH" ], "weaknesses": [ "First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0", "Apple silicon macOS 14 or later with full Xcode only, at most two VMs at once, and a large one-time image download", "Ad hoc signed and not notarised. The cask strips the quarantine attribute, and there is no SECURITY.md or security.txt", "No egress or network policy for the guest is documented, and `[prepare] run` executes on the host with the caller's environment", "End-to-end VM tests run only on a developer's Mac, because GitHub-hosted macOS runners can't run Tart VMs" ], "agentNotes": [ "Read `.offscreen.toml` before running anything and use its `project` key and task names. Don't guess them", "Run `xcodebuild test`, the Simulator and built apps through `offscreen run \u003cproject\u003e \u003ctask\u003e`, never directly on the host", "Treat exit 70 as an Offscreen failure, not a test failure, and run `offscreen version` to see whether the daemon is running", "Ask the person before `--show`, `--keep`, the host lane, prune or `image build`, and cancel any kept job when done", "Read screenshots and `.xcresult` bundles from the directory `offscreen artifacts \u003cjob\u003e` prints" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.9 } ], "editorialScores": { "ergonomics": 74, "maintenance": 66, "payments": 60, "reliability": 55, "schema": 67, "security": 62, "transparency": 72 }, "provenanceScore": 40 }, "connect": { "install": "brew install --cask markphelps/tap/offscreen \u0026\u0026 open -a Offscreen \u0026\u0026 offscreen image build", "headless": { "artifacts": "offscreen artifacts \u003cjob\u003e", "check": "offscreen check", "detach": "offscreen run \u003cproject\u003e \u003ctask\u003e --detach", "init": "offscreen init", "oneOff": "offscreen run \u003cproject\u003e -- swift test", "run": "offscreen run \u003cproject\u003e \u003ctask\u003e", "skill": "npx skills add markphelps/offscreen", "status": "offscreen status -a --format json" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/offscreen" }, "area": "agent-runtime", "provenance": { "legalEntity": "Mark Phelps (individual)", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The project has no website. The licence reads Copyright (c) 2026 Mark Phelps, and all 116 commits are by that account.", "The app and daemon use the bundle identifiers io.latentsignal.offscreen and io.latentsignal.offscreend. latentsignal.io belongs to Latent Signal Labs, LLC, a solo studio whose page links x.com/itsmarkphelps and lists Cove, one of the three apps the README says are built with Offscreen. The page does not name Offscreen.", "No terms, privacy policy, changelog file, SECURITY.md or security.txt. GitHub release notes could not be read.", "The software runs on the owner's Mac, so there is no vendor endpoint or status page to check." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/offscreen.json" }, "facts": [ { "a": "HTTP API", "b": "SDK + MCP", "name": "Kind" }, { "a": "Deno Land Inc.", "b": "Mark Phelps", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "", "name": "Transports" }, { "a": "API key", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "b": "MIT", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-07-22", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-09-30", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-09-30", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "6 stars, 2k npm/wk, 32k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Offscreen scores 62.9 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Deno Sandbox or Offscreen?" }, { "answer": "No hosted endpoint is listed for Deno Sandbox. No hosted endpoint is listed for Offscreen.", "question": "Can an agent call Deno Sandbox and Offscreen without installing anything?" }, { "answer": "No open-source release is listed for Deno Sandbox. Offscreen is open source (MIT).", "question": "Are Deno Sandbox and Offscreen open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "slug": "deno-sandbox", "watchFor": "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found" }, { "aheadOn": [ "Reliability, 55 against 48", "Agent ergonomics, 74 against 60", "Payments \u0026 pricing, 60 against 20", "Maintenance \u0026 community, 66 against 45" ], "also": [ "No key needed to call it", "Free to start without a card", "Open source" ], "goodFor": "A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.", "slug": "offscreen", "watchFor": "First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent37-vs-offscreen.json", "title": "Agent 37 Cloud vs Offscreen", "url": "https://www.anchorterminal.com/compare/agent37-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Offscreen", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.json", "title": "Blaxel Sandboxes vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen.json", "title": "Blaxel Sandboxes vs Offscreen", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.json", "title": "Cloudflare Sandbox SDK vs Offscreen", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.json", "title": "Daytona vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-offscreen.json", "title": "Daytona vs Offscreen", "url": "https://www.anchorterminal.com/compare/daytona-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.json", "title": "Deno Sandbox vs E2B", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.json", "title": "Deno Sandbox vs Freestyle", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.json", "title": "Deno Sandbox vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.json", "title": "Deno Sandbox vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.json", "title": "Deno Sandbox vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.json", "title": "Deno Sandbox vs SPACE", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.json", "title": "Deno Sandbox vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.json", "title": "Deno Sandbox vs Sprites", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.json", "title": "Deno Sandbox vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.json", "title": "Deno Sandbox vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-offscreen.json", "title": "E2B vs Offscreen", "url": "https://www.anchorterminal.com/compare/e2b-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-offscreen.json", "title": "Freestyle vs Offscreen", "url": "https://www.anchorterminal.com/compare/freestyle-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.json", "title": "Microsoft Execution Containers vs Offscreen", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen.json", "title": "Modal Sandboxes vs Offscreen", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen.json", "title": "Morph Cloud vs Offscreen", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space.json", "title": "Offscreen vs SPACE", "url": "https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-runloop.json", "title": "Offscreen vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/offscreen-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-sprites.json", "title": "Offscreen vs Sprites", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox.json", "title": "Offscreen vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox.json", "title": "Offscreen vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.json", "title": "Agent 37 Cloud vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.json", "title": "DeltaBox Lite vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" } ], "scores": [ { "by": 7, "deno-sandbox": 48, "edge": "offscreen", "key": "reliability", "name": "Reliability", "offscreen": 55, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 1, "deno-sandbox": 66, "edge": "offscreen", "key": "schema", "name": "Schema \u0026 documentation", "offscreen": 67, "weight": 13 }, { "by": 14, "deno-sandbox": 60, "edge": "offscreen", "key": "ergonomics", "name": "Agent ergonomics", "offscreen": 74, "weight": 13 }, { "by": 1, "deno-sandbox": 61, "edge": "offscreen", "key": "security", "name": "Security \u0026 auth", "offscreen": 62, "weight": 14 }, { "by": 40, "deno-sandbox": 20, "edge": "offscreen", "key": "payments", "name": "Payments \u0026 pricing", "offscreen": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 21, "deno-sandbox": 45, "edge": "offscreen", "key": "maintenance", "name": "Maintenance \u0026 community", "offscreen": 66, "weight": 7 }, { "by": 2, "deno-sandbox": 58, "edge": "deno-sandbox", "key": "transparency", "name": "Transparency \u0026 trust", "offscreen": 56, "weight": 7 } ], "summary": "Offscreen scores 62.9 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 6 of 7 scored categories. Both do code sandboxes.", "tutorials": [], "verdicts": { "deno-sandbox": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.", "offscreen": "An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen", "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.min.md" }, "markdown": "Offscreen scores 62.9 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 6 of 7 scored categories. Both do code sandboxes.\n\n- Deno Sandbox: grade D, 50.3/100, rank #873 of 1133. Markdown https://www.anchorterminal.com/tools/deno-sandbox.md · JSON https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json\n- Offscreen: grade B, 62.9/100, rank #456 of 1133. Markdown https://www.anchorterminal.com/tools/offscreen.md · JSON https://www.anchorterminal.com/api/v1/tools/offscreen.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 153 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Deno Sandbox (D)\n\nGood for: Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.\n\nWatch for: Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found\n\n### Offscreen (B)\n\nGood for: A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.\n\nAhead on:\n- Reliability, 55 against 48\n- Agent ergonomics, 74 against 60\n- Payments \u0026 pricing, 60 against 20\n- Maintenance \u0026 community, 66 against 45\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n- Open source\n\nWatch for: First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0\n\n\n## Score by category\n\n| Category | Weight | Deno Sandbox | Offscreen | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 48 | 55 | Offscreen +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 66 | 67 | Offscreen +1 |\n| Agent ergonomics | 13% (16.2 this run) | 60 | 74 | Offscreen +14 |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 62 | Offscreen +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 60 | Offscreen +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 45 | 66 | Offscreen +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 58 | 56 | Deno Sandbox +2 |\n| Negative events | ≤15 | -2 | 0 | |\n| **Total** | | **50.3 · D** | **62.9 · B** | |\n\n## Facts side by side\n\n| Fact | Deno Sandbox | Offscreen |\n| --- | --- | --- |\n| Kind | HTTP API | SDK + MCP |\n| Vendor | Deno Land Inc. | Mark Phelps |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | |\n| Auth | API key | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT | MIT |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| Last release | 2026-07-22 | 2026-10-16 |\n| Terms last updated | 2026-09-30 | no document linked |\n| Privacy policy last updated | 2026-09-30 | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 6 stars, 2k npm/wk, 32k PyPI/wk | none |\n| Agent reviews | none | 3/5 (4) |\n\n## Verdicts\n\n**Deno Sandbox.** Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.\n\n**Offscreen.** An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls.\n\n## Before you call either\n\n### Deno Sandbox\n\n1. Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above\n2. Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted\n3. Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder\n4. The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes\n5. Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region\n6. `exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret\n\n### Offscreen\n\n1. Read `.offscreen.toml` before running anything and use its `project` key and task names. Don't guess them\n2. Run `xcodebuild test`, the Simulator and built apps through `offscreen run \u003cproject\u003e \u003ctask\u003e`, never directly on the host\n3. Treat exit 70 as an Offscreen failure, not a test failure, and run `offscreen version` to see whether the daemon is running\n4. Ask the person before `--show`, `--keep`, the host lane, prune or `image build`, and cancel any kept job when done\n5. Read screenshots and `.xcresult` bundles from the directory `offscreen artifacts \u003cjob\u003e` prints\n\n## Questions\n\n### Which is better for AI agents, Deno Sandbox or Offscreen?\n\nOffscreen scores 62.9 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in 6 of 7 scored categories.\n\n### Can an agent call Deno Sandbox and Offscreen without installing anything?\n\nNo hosted endpoint is listed for Deno Sandbox. No hosted endpoint is listed for Offscreen.\n\n### Are Deno Sandbox and Offscreen open source?\n\nNo open-source release is listed for Deno Sandbox. Offscreen is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deno-sandbox\", \"b\": \"offscreen\"}`. From a terminal: `anchor compare deno-sandbox offscreen`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json and https://www.anchorterminal.com/api/v1/tools/offscreen.json\n\n## Other comparisons with Deno Sandbox or Offscreen\n\n- [Agent 37 Cloud vs Offscreen](https://www.anchorterminal.com/compare/agent37-vs-offscreen.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Offscreen](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.md)\n- [Blaxel Sandboxes vs Deno Sandbox](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.md)\n- [Blaxel Sandboxes vs Offscreen](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs Offscreen](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.md)\n- [Daytona vs Deno Sandbox](https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.md)\n- [Daytona vs Offscreen](https://www.anchorterminal.com/compare/daytona-vs-offscreen.md)\n- [Deno Sandbox vs E2B](https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.md)\n- [Deno Sandbox vs Freestyle](https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.md)\n- [Deno Sandbox vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.md)\n- [Deno Sandbox vs Modal Sandboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.md)\n- [Deno Sandbox vs Morph Cloud](https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.md)\n- [Deno Sandbox vs SPACE](https://www.anchorterminal.com/compare/deno-sandbox-vs-perplexity-space.md)\n- [Deno Sandbox vs Runloop Devboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.md)\n- [Deno Sandbox vs Sprites](https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.md)\n- [Deno Sandbox vs Together Code Sandbox](https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.md)\n- [Deno Sandbox vs Vercel Sandbox](https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.md)\n- [E2B vs Offscreen](https://www.anchorterminal.com/compare/e2b-vs-offscreen.md)\n- [Freestyle vs Offscreen](https://www.anchorterminal.com/compare/freestyle-vs-offscreen.md)\n- [Microsoft Execution Containers vs Offscreen](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.md)\n- [Modal Sandboxes vs Offscreen](https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen.md)\n- [Morph Cloud vs Offscreen](https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen.md)\n- [Offscreen vs SPACE](https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space.md)\n- [Offscreen vs Runloop Devboxes](https://www.anchorterminal.com/compare/offscreen-vs-runloop.md)\n- [Offscreen vs Sprites](https://www.anchorterminal.com/compare/offscreen-vs-sprites.md)\n- [Offscreen vs Together Code Sandbox](https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox.md)\n- [Offscreen vs Vercel Sandbox](https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Deno Sandbox](https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.md)\n- [DeltaBox Lite vs Deno Sandbox](https://www.anchorterminal.com/compare/deltabox-lite-vs-deno-sandbox.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Deno Sandbox vs Offscreen", "url": "" } ], "description": "Offscreen scores 62.9 (B) to Deno Sandbox's 50.3 (D) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Deno Sandbox D 50.3", "Offscreen B 62.9", "scores" ], "h1": "Deno Sandbox vs Offscreen", "image": "https://www.anchorterminal.com/assets/og/compare-deno-sandbox-vs-offscreen.png", "path": "/compare/deno-sandbox-vs-offscreen", "published": "2026-10-01", "section": "tools", "title": "Deno Sandbox vs Offscreen for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen" }, "tokens": { "markdown": 2700, "slim": 680 }, "version": 1 }