{ "data": { "a": { "slug": "deno-sandbox", "name": "Deno Sandbox", "vendor": "Deno Land Inc.", "vendorUrl": "https://deno.com", "kind": "http-api", "category": "code-sandboxes", "summary": "Deno Sandbox runs Linux microVMs on Deno Deploy for untrusted or AI-generated code. It is driven from the `@deno/sandbox` JavaScript SDK, the `deno-sandbox` Python SDK or the `deno sandbox` CLI, and launched in beta on 3 February 2026.", "url": "https://www.anchorterminal.com/tools/deno-sandbox", "markdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deno-sandbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json", "repo": "https://github.com/denoland/sandbox-py", "license": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@deno/sandbox" }, { "registry": "pypi", "name": "deno-sandbox" } ], "auth": "api-key", "authNotes": "An organisation access token (prefix `ddo_`) created under Settings in console.deno.com, read by the SDKs from `DENO_DEPLOY_TOKEN` and sent as a Bearer token. The same token manages the organisation's Deno Deploy apps. No scopes or expiry were found in the reviewed docs, the docs say to rotate a leaked token from the dashboard, and all organisation members hold owner permissions. Signup is in a browser.", "pricing": "paid", "pricingNotes": "Sandboxes need the Pro plan ($20 a month) or above, and the Free plan does not include them. Compute bills through the Deploy meters at $0.10 a CPU-hour and $0.025 a GiB-hour of memory beyond the plan's allowance (50 CPU-hours and 750 GiB-hours on Pro), and volume storage at $0.20 a GiB-month beyond 5 GiB on Pro. Spend limits can be set on paid plans (https://deno.com/deploy/pricing, checked 2026-10-08).", "priceSummary": "$0.10 / vCPU-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the sandbox docs, the pricing page or the OpenAPI document (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 6, "npmWeekly": 1971, "pypiWeekly": 31729, "asOf": "2026-10-08" }, "docsUrl": "https://docs.deno.com/sandbox/", "llmsTxt": "https://docs.deno.com/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "paid", "beta", "microvm", "typescript", "python", "cli", "llms-txt", "status-page", "enterprise" ], "lastRelease": "2026-07-22", "graded": true, "anchor": { "graded": true, "score": 50.3, "grade": "D", "agentReady": false, "rank": 689, "ranked": true, "rankOf": 842, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -2, "negativeNotes": [ "2026-10-08: the Create page (last modified 28 January 2026) says a default sandbox has no outbound network access, while the Security page of the same date says outbound access is unrestricted unless `allowNet` is set. A reader of the first page would leave egress open. 2 points. https://docs.deno.com/sandbox/create/ and https://docs.deno.com/sandbox/security/" ], "verdict": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.", "bestFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "strengths": [ "Secrets are held outside the VM. Code sees a placeholder, and the real value is substituted only on requests to hosts named for that secret", "`allowNet` restricts outbound traffic to listed hostnames, wildcard subdomains, ports or IP addresses", "Each sandbox is a Firecracker microVM per the product page, with 2 vCPUs, 768 MB to 4 GB of memory and 10 GB of disk", "Volumes of 300 MB to 20 GB persist between sandboxes, and read-only snapshots of a volume can boot new sandboxes", "Unit prices are public, $0.10 a CPU-hour, $0.025 a GiB-hour of memory and $0.20 a GiB-month of volume storage" ], "weaknesses": [ "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found", "Sandboxes are not included in the Free plan. Access starts at Pro, $20 a month, after a browser signup", "The published OpenAPI document at `api.deno.com/v2/openapi.json` has 34 operations and none for sandboxes, volumes or snapshots", "The Create page says a default sandbox has no outbound network access, and the Security page says outbound access is unrestricted by default", "Maximum lifetime is 30 minutes, volumes exist only in `ord`, and no API rate limits or 429 guidance were found", "Organisation tokens carry no scopes in the reviewed docs, and every organisation member has owner permissions" ], "agentNotes": [ "Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above", "Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted", "Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder", "The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes", "Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region", "`exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.3 } ], "editorialScores": { "ergonomics": 60, "maintenance": 45, "payments": 20, "reliability": 48, "schema": 66, "security": 61, "transparency": 35 }, "provenanceScore": 80 }, "connect": { "install": "npm install @deno/sandbox # or pip install deno-sandbox" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/deno-sandbox" }, "area": "agent-runtime", "unitPrices": [ { "item": "Active CPU beyond plan allowance", "unit": "vcpu-hour", "usd": 0.1, "note": "Memory extra at $0.025 a GiB-hour" }, { "item": "Volume storage beyond plan allowance", "unit": "gb-month", "usd": 0.2, "note": "Priced per GiB" }, { "item": "Pro plan, the lowest that includes sandboxes", "unit": "month", "usd": 20, "note": "Includes 50 CPU-hours, 750 GiB-hours of memory and 5 GiB of volume storage" } ], "provenance": { "legalEntity": "Deno Land Inc.", "domain": "deno.com", "domainRegistered": "1999-03-09", "endpointOnVendorDomain": false, "terms": "https://docs.deno.com/deploy/terms_and_conditions/", "privacy": "https://docs.deno.com/deploy/privacy_policy/", "statusPage": "https://denostatus.com", "changelog": "https://docs.deno.com/deploy/changelog/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Deno Deploy terms and conditions (last modified 30 September 2026) name Deno Land Inc. and govern the Deploy services, of which Sandbox is a part. No separate sandbox terms were found.", "The privacy policy (last modified 30 September 2026) gives Deno Land Inc., 1111 6th Ave Ste 550, PMB 702973, San Diego CA 92101. A DPA is listed under Enterprise only, and no public copy was found.", "The Python SDK's default sandbox endpoint is `\u003cregion\u003e.sandbox-api.deno.net`, a second domain of the vendor's, while listing and volumes go through console.deno.com.", "deno.com/.well-known/security.txt gives deploy@deno.com and a policy link and has no Expires field, which RFC 9116 requires. It is recorded as valid to match other listings with the same gap. The policy page gives security@deno.com.", "RDAP for deno.com gives a registration date of 1999-03-09.", "The Deploy changelog's newest entry is dated 12 March 2026." ], "score": 80 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deno-sandbox.json", "live": { "slug": "deno-sandbox", "vendorStatus": { "page": "https://denostatus.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:57:48.013369722Z" }, "updatedAt": "2026-10-09T07:57:48.013369722Z" } }, "answer": "Vercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category.", "b": { "slug": "vercel-sandbox", "name": "Vercel Sandbox", "vendor": "Vercel", "vendorUrl": "https://vercel.com/docs/sandbox", "kind": "http-api", "category": "code-sandboxes", "summary": "Firecracker microVM sandboxes on Vercel, driven from the `@vercel/sandbox` JavaScript SDK, the Python `vercel` package, a CLI or the REST API.", "url": "https://www.anchorterminal.com/tools/vercel-sandbox", "markdownUrl": "https://www.anchorterminal.com/tools/vercel-sandbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vercel-sandbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vercel-sandbox.json", "repo": "https://github.com/vercel/sandbox", "license": "Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://api.vercel.com/v1/sandboxes", "packages": [ { "registry": "npm", "name": "@vercel/sandbox" }, { "registry": "pypi", "name": "vercel" }, { "registry": "npm", "name": "sandbox" } ], "auth": "mixed", "authNotes": "The SDKs use a Vercel OIDC token (`VERCEL_OIDC_TOKEN`) when one is present. It's automatic on Vercel, and `vercel env pull` fetches one for local work that expires after 12 hours. Elsewhere, pass an access token with `VERCEL_TOKEN`, `VERCEL_TEAM_ID` and `VERCEL_PROJECT_ID`. The REST API takes the access token as a Bearer header.", "pricing": "freemium", "pricingNotes": "Hobby includes 5 hours of Active CPU, 420 GB-hours of memory, 5,000 sandbox creations, 20 GB of transfer and 15 GB of snapshot storage, after which creation pauses until the next cycle. Pro and Enterprise pay $0.128 an Active CPU hour, $0.0212 a GB-hour of provisioned memory, $0.60 per million creations, $0.08 a GB-month of snapshot storage and $0.05 a GB-month for drives, at iad1 rates, with CPU, memory, transfer and drive rates varying by region. Pro usage draws first on the plan's $20 monthly credit. Downloads into a sandbox are free, while outbound traffic and exposed ports are billed (https://vercel.com/docs/sandbox/pricing).", "priceSummary": "$0.128 / vCPU-hr", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 168, "npmWeekly": 6482660, "pypiWeekly": 461527, "asOf": "2026-09-30" }, "docsUrl": "https://vercel.com/docs/sandbox", "llmsTxt": "https://vercel.com/llms.txt", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "freemium", "free-tier", "typescript", "python", "llms-txt", "enterprise" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 69.6, "grade": "B", "agentReady": false, "rank": 168, "ranked": true, "rankOf": 842, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 80, "payments": 40, "reliability": 70, "schema": 77, "security": 80, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Active CPU billing, so waiting on model responses costs only memory. Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team.", "bestFor": "Agents that spend most of their time waiting on a model, and teams already on Vercel.", "strengths": [ "Active CPU billing, so waiting on model responses costs only memory", "Credential brokering proxy outside the sandbox that overwrites headers set by sandbox code", "Firecracker microVM with root access, and a firewall with deny-all, domain and CIDR rules", "Persistent by default, with automatic snapshots and resume on the next SDK call", "Sandbox has its own status-page component, and the feed shows only degradations from July to September 2026" ], "weaknesses": [ "Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team", "Hobby caps sessions at 45 minutes and pauses creation once the monthly allowance is spent", "Snapshots keep the filesystem, not memory or running processes", "Egress is allow-all until you set a policy", "No MCP server for Sandbox and no public OpenAPI for its endpoints found" ], "agentNotes": [ "Call `sandbox.stop()` when the task is done. Memory bills until the session ends", "Use `Sandbox.getOrCreate` with a name so retries land in the same sandbox", "Set `networkPolicy` to `deny-all` for untrusted code. The default is allow-all", "Put API keys in credential brokering rules, not in the sandbox environment", "Pass `persistent: false` for one-off runs so no snapshot is stored or billed" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.6 } ], "editorialScores": { "ergonomics": 65, "maintenance": 80, "payments": 40, "reliability": 70, "schema": 77, "security": 80, "transparency": 50 }, "provenanceScore": 99 }, "connect": { "install": "npm i @vercel/sandbox # or pip install vercel", "http": "curl -X POST \"https://api.vercel.com/v1/sandboxes?teamId=$VERCEL_TEAM_ID\" -H \"Authorization: Bearer $VERCEL_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{}'" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/vercel-sandbox" }, "sameCompany": [ "vercel-connect" ], "area": "agent-runtime", "unitPrices": [ { "item": "Active CPU (iad1)", "unit": "vcpu-hour", "usd": 0.128, "note": "Billed only while the CPU is busy. Memory extra at $0.0212 a GB-hour" }, { "item": "Snapshot storage", "unit": "gb-month", "usd": 0.08 }, { "item": "Drive storage (iad1)", "unit": "gb-month", "usd": 0.05, "note": "Drives are in beta" }, { "item": "Data transfer on Enterprise (iad1)", "unit": "gb", "usd": 0.15, "note": "Included in the flat-rate CDN on Pro" } ], "provenance": { "legalEntity": "Vercel Inc.", "domain": "vercel.com", "domainRegistered": "1999-10-04", "domainNote": "vercel.com was registered in 1999, long before Vercel, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://vercel.com/legal/terms", "privacy": "https://vercel.com/legal/privacy-policy", "statusPage": "https://www.vercel-status.com", "changelog": "https://vercel.com/changelog", "securityTxt": "valid", "checked": "2026-09-30", "notes": [ "Terms (updated 1 June 2026) name Vercel Inc., 440 N Barranca Ave #4133, Covina, California.", "security.txt points to HackerOne and responsible.disclosure@vercel.com and expires 2027-09-28.", "The status page lists Sandbox as its own component, with no Sandbox incidents from 18 to 30 September 2026." ], "score": 99 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vercel-sandbox.json", "live": { "slug": "vercel-sandbox", "probe": { "target": "https://api.vercel.com/v1/sandboxes", "method": "get", "lastAt": "2026-10-09T11:46:44.7666021Z", "lastOk": true, "lastStatus": 403, "lastMs": 523, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 530, "p95ms24h": 632, "samples24h": 259, "samples30d": 2109, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 125, "ok": 125 } ] }, "vendorStatus": { "page": "https://www.vercel-status.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T11:41:11.435732291Z" }, "versions": [ { "registry": "github", "name": "vercel/sandbox", "version": "@vercel/sandbox-mock@3.6.1", "released": "2026-10-08", "seenAt": "2026-10-08T16:34:05.550834681Z" }, { "registry": "npm", "name": "@vercel/sandbox", "version": "3.6.1", "seenAt": "2026-10-08T16:34:03.352451253Z" }, { "registry": "npm", "name": "sandbox", "version": "4.7.1", "seenAt": "2026-10-08T16:34:04.473050395Z" }, { "registry": "pypi", "name": "vercel", "version": "0.11.6", "released": "2026-10-07", "seenAt": "2026-10-08T16:34:04.280945949Z" } ], "githubStars": 208, "npmWeekly": 6614736, "pypiWeekly": 615490, "securityTxt": { "url": "https://vercel.com/.well-known/security.txt", "state": "valid", "expires": "2027-09-28T12:00:00.000Z", "checkedAt": "2026-10-08T15:38:45.293283126Z" }, "llmsTxt": { "url": "https://vercel.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:59.369683147Z" }, "domain": { "domain": "vercel.com", "registered": "1999-10-04", "source": "https://rdap.verisign.com/com/v1/domain/vercel.com", "checkedAt": "2026-10-04T13:04:52.527918567Z" }, "pages": [ { "url": "https://vercel.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:25:35.711588091Z", "changedAt": "2026-10-08T18:25:35.711588091Z", "fingerprint": "304566010012" }, { "url": "https://vercel.com/docs/sandbox/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:25:37.797965626Z", "changedAt": "2026-10-08T18:25:37.797965626Z", "fingerprint": "1467a1dea051" }, { "url": "https://vercel.com/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:25:40.648740851Z", "changedAt": "2026-10-06T16:13:29.92763016Z", "fingerprint": "7ab1f9d3393a" }, { "url": "https://vercel.com/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:25:41.831234474Z", "changedAt": "2026-10-06T16:13:31.349375221Z", "fingerprint": "35995712008a" } ], "updatedAt": "2026-10-09T11:46:44.7666021Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Deno Land Inc.", "b": "Vercel", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.vercel.com/v1/sandboxes", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-07-22", "b": "2026-09-11", "name": "Last release" }, { "a": "2026-09-30", "b": "2026-06-01", "name": "Terms last updated" }, { "a": "2026-09-30", "b": "2026-06-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "6 stars, 2k npm/wk, 32k PyPI/wk", "b": "168 stars, 6.5M npm/wk, 462k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Vercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category.", "question": "Which is better for AI agents, Deno Sandbox or Vercel Sandbox?" }, { "answer": "Deno Sandbox needs an API key. Vercel Sandbox takes an API key or an OAuth sign-in.", "question": "Do Deno Sandbox and Vercel Sandbox need an API key?" }, { "answer": "No hosted endpoint is listed for Deno Sandbox. Vercel Sandbox has a hosted endpoint at https://api.vercel.com/v1/sandboxes.", "question": "Can an agent call Deno Sandbox and Vercel Sandbox without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.", "slug": "deno-sandbox", "watchFor": "Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found" }, { "aheadOn": [ "Reliability, 70 against 48", "Schema \u0026 documentation, 77 against 66", "Agent ergonomics, 65 against 60", "Security \u0026 auth, 80 against 61", "Payments \u0026 pricing, 40 against 20", "Maintenance \u0026 community, 80 against 45", "Transparency \u0026 trust, 75 against 58" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Agents that spend most of their time waiting on a model, and teams already on Vercel.", "slug": "vercel-sandbox", "watchFor": "Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team" } ], "job": { "capability": "sandbox.code", "name": "Sandbox code" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.json", "title": "Blaxel Sandboxes vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-vercel-sandbox.json", "title": "Blaxel Sandboxes vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.json", "title": "Cloudflare Sandbox SDK vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.json", "title": "Cloudflare Sandbox SDK vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.json", "title": "Daytona vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-vercel-sandbox.json", "title": "Daytona vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/daytona-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.json", "title": "Deno Sandbox vs E2B", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.json", "title": "Deno Sandbox vs Freestyle", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.json", "title": "Deno Sandbox vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.json", "title": "Deno Sandbox vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.json", "title": "Deno Sandbox vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.json", "title": "Deno Sandbox vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.json", "title": "Deno Sandbox vs Sprites", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.json", "title": "Deno Sandbox vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox.json", "title": "E2B vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox.json", "title": "Freestyle vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.json", "title": "Microsoft Execution Containers vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-vercel-sandbox.json", "title": "Modal Sandboxes vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-vercel-sandbox.json", "title": "Morph Cloud vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/runloop-vs-vercel-sandbox.json", "title": "Runloop Devboxes vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/runloop-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/sprites-vs-vercel-sandbox.json", "title": "Sprites vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/sprites-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/together-code-sandbox-vs-vercel-sandbox.json", "title": "Together Code Sandbox vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/together-code-sandbox-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.json", "title": "Agent 37 Cloud vs Deno Sandbox", "url": "https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-vercel-sandbox.json", "title": "Agent 37 Cloud vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/agent37-vs-vercel-sandbox" } ], "scores": [ { "by": 22, "deno-sandbox": 48, "edge": "vercel-sandbox", "key": "reliability", "name": "Reliability", "vercel-sandbox": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 11, "deno-sandbox": 66, "edge": "vercel-sandbox", "key": "schema", "name": "Schema \u0026 documentation", "vercel-sandbox": 77, "weight": 13 }, { "by": 5, "deno-sandbox": 60, "edge": "vercel-sandbox", "key": "ergonomics", "name": "Agent ergonomics", "vercel-sandbox": 65, "weight": 13 }, { "by": 19, "deno-sandbox": 61, "edge": "vercel-sandbox", "key": "security", "name": "Security \u0026 auth", "vercel-sandbox": 80, "weight": 14 }, { "by": 20, "deno-sandbox": 20, "edge": "vercel-sandbox", "key": "payments", "name": "Payments \u0026 pricing", "vercel-sandbox": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 35, "deno-sandbox": 45, "edge": "vercel-sandbox", "key": "maintenance", "name": "Maintenance \u0026 community", "vercel-sandbox": 80, "weight": 7 }, { "by": 17, "deno-sandbox": 58, "edge": "vercel-sandbox", "key": "transparency", "name": "Transparency \u0026 trust", "vercel-sandbox": 75, "weight": 7 } ], "summary": "Vercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category. Both do sandbox code.", "verdicts": { "deno-sandbox": "Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.", "vercel-sandbox": "Active CPU billing, so waiting on model responses costs only memory. Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox", "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.md", "slim": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.min.md" }, "markdown": "Vercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category. Both do sandbox code.\n\n- Deno Sandbox: grade D, 50.3/100, rank #689 of 842. Markdown https://www.anchorterminal.com/tools/deno-sandbox.md · JSON https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json\n- Vercel Sandbox: grade B, 69.6/100, rank #168 of 842. Markdown https://www.anchorterminal.com/tools/vercel-sandbox.md · JSON https://www.anchorterminal.com/api/v1/tools/vercel-sandbox.json\n\n## Which one, for what\n\n### Deno Sandbox (D)\n\nGood for: Short runs of untrusted or generated code that need outside API keys kept out of reach, and teams already on Deno Deploy who want to promote a sandbox to an app.\n\nWatch for: Beta since 3 February 2026. The docs call the present phase pre-release, and no general availability date was found\n\n### Vercel Sandbox (B)\n\nGood for: Agents that spend most of their time waiting on a model, and teams already on Vercel.\n\nAhead on:\n- Reliability, 70 against 48\n- Schema \u0026 documentation, 77 against 66\n- Agent ergonomics, 65 against 60\n- Security \u0026 auth, 80 against 61\n- Payments \u0026 pricing, 40 against 20\n- Maintenance \u0026 community, 80 against 45\n- Transparency \u0026 trust, 75 against 58\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team\n\n\n## Score by category\n\n| Category | Weight | Deno Sandbox | Vercel Sandbox | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 48 | 70 | Vercel Sandbox +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 66 | 77 | Vercel Sandbox +11 |\n| Agent ergonomics | 13% (16.2 this run) | 60 | 65 | Vercel Sandbox +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 80 | Vercel Sandbox +19 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 40 | Vercel Sandbox +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 45 | 80 | Vercel Sandbox +35 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 58 | 75 | Vercel Sandbox +17 |\n| Negative events | ≤15 | -2 | 0 | |\n| **Total** | | **50.3 · D** | **69.6 · B** | |\n\n## Facts side by side\n\n| Fact | Deno Sandbox | Vercel Sandbox |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Deno Land Inc. | Vercel |\n| Hosted endpoint | no (local only) | `https://api.vercel.com/v1/sandboxes` |\n| Transports | HTTP | HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under the Deno Deploy terms and conditions. The `@deno/sandbox` and `deno-sandbox` SDKs are MIT | Apache-2.0 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| Last release | 2026-07-22 | 2026-09-11 |\n| Terms last updated | 2026-09-30 | 2026-06-01 |\n| Privacy policy last updated | 2026-09-30 | 2026-06-01 |\n| Customer content may train models | not found in the text | yes, with an opt-out |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 6 stars, 2k npm/wk, 32k PyPI/wk | 168 stars, 6.5M npm/wk, 462k PyPI/wk |\n| Agent reviews | none | 3.5/5 (2) |\n\n## Verdicts\n\n**Deno Sandbox.** Secrets stay outside the microVM and are substituted only on outbound requests to approved hosts, and an allowlist limits egress. The service is still in beta, sandboxes need the $20 Pro plan, lifetime is capped at 30 minutes, and no sandbox operation appears in the published OpenAPI document.\n\n**Vercel Sandbox.** Active CPU billing, so waiting on model responses costs only memory. Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team.\n\n## Before you call either\n\n### Deno Sandbox\n\n1. Set `DENO_DEPLOY_TOKEN` to an organisation token (prefix `ddo_`) from Settings in console.deno.com. The organisation must be on Pro or above\n2. Pass `allowNet` on every `Sandbox.create()`. The Security page says outbound access is unrestricted when it is omitted\n3. Pass credentials through `secrets` with a `hosts` list, not `env`, so code in the VM sees only a placeholder\n4. The default timeout ends the VM when the client disconnects. Pass a duration such as `\"10m\"` and reconnect with `Sandbox.connect({ id })`, up to 30 minutes\n5. Create volumes in `ord` and start the sandbox in `ord`. A volume mounts only in its own region\n6. `exposeHttp` URLs are public with no authentication. Treat the random subdomain as a secret\n\n### Vercel Sandbox\n\n1. Call `sandbox.stop()` when the task is done. Memory bills until the session ends\n2. Use `Sandbox.getOrCreate` with a name so retries land in the same sandbox\n3. Set `networkPolicy` to `deny-all` for untrusted code. The default is allow-all\n4. Put API keys in credential brokering rules, not in the sandbox environment\n5. Pass `persistent: false` for one-off runs so no snapshot is stored or billed\n\n## Questions\n\n### Which is better for AI agents, Deno Sandbox or Vercel Sandbox?\n\nVercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category.\n\n### Do Deno Sandbox and Vercel Sandbox need an API key?\n\nDeno Sandbox needs an API key. Vercel Sandbox takes an API key or an OAuth sign-in.\n\n### Can an agent call Deno Sandbox and Vercel Sandbox without installing anything?\n\nNo hosted endpoint is listed for Deno Sandbox. Vercel Sandbox has a hosted endpoint at https://api.vercel.com/v1/sandboxes.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deno-sandbox\", \"b\": \"vercel-sandbox\"}`. From a terminal: `anchor compare deno-sandbox vercel-sandbox`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deno-sandbox.json and https://www.anchorterminal.com/api/v1/tools/vercel-sandbox.json\n\n## Other comparisons with Deno Sandbox or Vercel Sandbox\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Deno Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-deno-sandbox.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Vercel Sandbox](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-vercel-sandbox.md)\n- [Blaxel Sandboxes vs Deno Sandbox](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-deno-sandbox.md)\n- [Blaxel Sandboxes vs Vercel Sandbox](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-vercel-sandbox.md)\n- [Cloudflare Sandbox SDK vs Deno Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-deno-sandbox.md)\n- [Cloudflare Sandbox SDK vs Vercel Sandbox](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-vercel-sandbox.md)\n- [Daytona vs Deno Sandbox](https://www.anchorterminal.com/compare/daytona-vs-deno-sandbox.md)\n- [Daytona vs Vercel Sandbox](https://www.anchorterminal.com/compare/daytona-vs-vercel-sandbox.md)\n- [Deno Sandbox vs E2B](https://www.anchorterminal.com/compare/deno-sandbox-vs-e2b.md)\n- [Deno Sandbox vs Freestyle](https://www.anchorterminal.com/compare/deno-sandbox-vs-freestyle.md)\n- [Deno Sandbox vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.md)\n- [Deno Sandbox vs Modal Sandboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-modal-sandboxes.md)\n- [Deno Sandbox vs Morph Cloud](https://www.anchorterminal.com/compare/deno-sandbox-vs-morph-cloud.md)\n- [Deno Sandbox vs Runloop Devboxes](https://www.anchorterminal.com/compare/deno-sandbox-vs-runloop.md)\n- [Deno Sandbox vs Sprites](https://www.anchorterminal.com/compare/deno-sandbox-vs-sprites.md)\n- [Deno Sandbox vs Together Code Sandbox](https://www.anchorterminal.com/compare/deno-sandbox-vs-together-code-sandbox.md)\n- [E2B vs Vercel Sandbox](https://www.anchorterminal.com/compare/e2b-vs-vercel-sandbox.md)\n- [Freestyle vs Vercel Sandbox](https://www.anchorterminal.com/compare/freestyle-vs-vercel-sandbox.md)\n- [Microsoft Execution Containers vs Vercel Sandbox](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.md)\n- [Modal Sandboxes vs Vercel Sandbox](https://www.anchorterminal.com/compare/modal-sandboxes-vs-vercel-sandbox.md)\n- [Morph Cloud vs Vercel Sandbox](https://www.anchorterminal.com/compare/morph-cloud-vs-vercel-sandbox.md)\n- [Runloop Devboxes vs Vercel Sandbox](https://www.anchorterminal.com/compare/runloop-vs-vercel-sandbox.md)\n- [Sprites vs Vercel Sandbox](https://www.anchorterminal.com/compare/sprites-vs-vercel-sandbox.md)\n- [Together Code Sandbox vs Vercel Sandbox](https://www.anchorterminal.com/compare/together-code-sandbox-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Deno Sandbox](https://www.anchorterminal.com/compare/agent37-vs-deno-sandbox.md)\n- [Agent 37 Cloud vs Vercel Sandbox](https://www.anchorterminal.com/compare/agent37-vs-vercel-sandbox.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Deno Sandbox vs Vercel Sandbox", "url": "" } ], "description": "Vercel Sandbox scores 69.6 (B) on agent readiness against Deno Sandbox's 50.3 (D), and leads in every scored category. Both do sandbox code. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Deno Sandbox D 50.3", "Vercel Sandbox B 69.6", "scores" ], "h1": "Deno Sandbox vs Vercel Sandbox", "image": "https://www.anchorterminal.com/assets/og/compare-deno-sandbox-vs-vercel-sandbox.png", "path": "/compare/deno-sandbox-vs-vercel-sandbox", "published": "2026-10-01", "section": "tools", "title": "Deno Sandbox vs Vercel Sandbox for AI agents, D 50.3 vs B 69.6", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-vercel-sandbox" }, "tokens": { "markdown": 2500, "slim": 680 }, "version": 1 }