{ "data": { "a": { "slug": "microsoft-execution-containers", "name": "Microsoft Execution Containers", "vendor": "Microsoft", "vendorUrl": "https://github.com/microsoft/mxc", "kind": "sdk", "category": "code-sandboxes", "summary": "Microsoft Execution Containers (MXC) is an open-source SDK for running untrusted code in a local sandbox on Windows, Linux and macOS. An application embeds it through Node.js, .NET or Rust and sets filesystem, network and UI policy for each run.", "url": "https://www.anchorterminal.com/tools/microsoft-execution-containers", "markdownUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json", "repo": "https://github.com/microsoft/mxc", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@microsoft/mxc-sdk" }, { "registry": "nuget", "name": "Microsoft.Mxc.Sdk" } ], "auth": "none", "authNotes": "No account, key or sign-in. MXC is a library the host application loads in its own process, so it holds no credential of its own. The workload runs with whatever the request grants. Network egress, ingress and host loopback resolve to `deny` when omitted, and filesystem access is limited to the `readonlyPaths` and `readwritePaths` the caller lists. On Windows the `isolation_session` backend creates a separate agent user account for each container and returns its name and SID.", "pricing": "free", "pricingNotes": "Free. The SDKs and native runtime are MIT and install from npm, NuGet and crates.io with no account or card. There is no hosted service and nothing to buy. Compute is the owner's own machine. The Windows backends need Windows 11 at the builds listed in the repository (checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the SDK source. Local open-source software with no paid endpoint (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1506, "npmWeekly": 471674, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://github.com/microsoft/mxc/blob/main/docs/api-reference/README.md", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "sdk", "open-source", "local", "free", "no-auth", "no-card", "typescript", "dotnet", "rust", "windows", "linux", "macos", "json-schema", "new-1.0" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 76.3, "grade": "BB", "agentReady": true, "rank": 43, "ranked": true, "rankOf": 1199, "categoryRank": 1, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 92, "payments": 60, "reliability": 81, "schema": 81, "security": 69, "transparency": 83 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all.", "bestFor": "A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.", "strengths": [ "MIT licence, with SDKs for Node.js, .NET and Rust all at 1.0.1 and the native runtime bundled in the npm and NuGet packages", "Egress, ingress and host loopback default to `deny`, and filesystem access is limited to listed read-only and read-write paths", "A draft-07 JSON Schema for the stable 1.0.0 request, with descriptions on 135 of 150 properties", "Errors carry one of 12 typed codes plus an optional remediation, and `validate*` calls dry-run a request without creating a container", "Telemetry is opt-in, Windows-only and gated on user consent and an administrative policy that can only block it" ], "weaknesses": [ "1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased", "Enforcement differs by backend. `isolation_session` cannot restrict networking, and proxy routing is cooperative on Seatbelt and WSLC", "Persistent containers exist only for `isolation_session` and `wslc`, both on Windows", "On Windows the Node SDK runs a PATH-resolved `whoami` when it loads, reported on 24 September 2026 and still in the 1.0.1 source", "The npm package is 37.7 MB compressed, needs Node.js 24 or later, and carries no `repository` field or provenance attestation" ], "agentNotes": [ "Import from `@microsoft/mxc-sdk/v1`. The package root exports nothing.", "Call `getPlatformSupport()` first and stop if `isSupported` is false. `getAvailableBackends()` is advisory and launch-time validation still applies.", "Set `network.egress.default` to `allow` only when the task needs it. Omitted network policy resolves to deny in every direction.", "Never pass `--audit` to an executor for untrusted code. It turns off all sandbox security for the workload.", "Read `ExecutionResult.warnings` after each run. Security warnings arrive there and are not written to stdout or stderr." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76.3 } ], "editorialScores": { "ergonomics": 74, "maintenance": 92, "payments": 60, "reliability": 81, "schema": 81, "security": 69, "transparency": 86 }, "provenanceScore": 79, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @microsoft/mxc-sdk" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/microsoft-execution-containers" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-agent-framework", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "copilot-studio-mcp", "power-automate", "foundry-local", "microsoft-decision-1", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph", "microsoft-graph-people" ], "area": "agent-runtime", "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://go.microsoft.com/fwlink/?linkid=521839", "statusPage": "", "changelog": "https://github.com/microsoft/mxc/releases", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The repository is under GitHub's microsoft organisation, `LICENSE.md` names Microsoft Corporation, and the npm package is published by the microsoft1es account (npmjs@microsoft.com).", "www.microsoft.com/.well-known/security.txt loads and points to the MSRC researcher portal, but its Expires field is 2026-09-23T16:00:00.000Z, which had passed on 8 October 2026.", "RDAP for microsoft.com gives a registration date of 1991-05-02.", "No terms page applies to the open-source SDK beyond the MIT licence. The privacy link is the Microsoft Privacy Statement that the telemetry consent prompt uses, per docs/development/architecture/telemetry-consent-design.md.", "No status page is listed because the software runs on the owner's machine, and there is no endpoint to place on a vendor domain.", "https://learn.microsoft.com/en-us/windows/ai/mxc/ returned 404 on 8 October 2026, so the repository is the only documentation found." ], "score": 79 }, "requirements": { "agentAlone": true, "card": "no", "freeTier": true, "credential": "none", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/microsoft-execution-containers.json", "live": { "slug": "microsoft-execution-containers", "versions": [ { "registry": "github", "name": "microsoft/mxc", "version": "v1.0.1", "released": "2026-10-17", "seenAt": "2026-10-22T07:55:59.665238933Z" }, { "registry": "npm", "name": "@microsoft/mxc-sdk", "version": "1.0.1", "seenAt": "2026-10-22T07:55:58.371716097Z" } ], "githubStars": 2952, "npmWeekly": 172959, "securityTxt": { "url": "https://microsoft.com/.well-known/security.txt", "state": "expired", "expires": "2026-09-23T16:00:00.000Z", "checkedAt": "2026-10-21T15:58:16.221660305Z" }, "domain": { "domain": "microsoft.com", "registered": "1991-05-02", "source": "https://rdap.verisign.com/com/v1/domain/microsoft.com", "checkedAt": "2026-10-18T13:35:57.721764763Z" }, "pages": [ { "url": "https://go.microsoft.com/fwlink/?linkid=521839", "kind": "privacy", "status": 0, "checkedAt": "2026-10-22T01:18:20.806382408Z", "changedAt": "0001-01-01T00:00:00Z", "blockedByRobots": true } ], "github": { "repo": "microsoft/mxc", "checkedAt": "2026-10-19T06:28:37.185959901Z", "stars": 2915, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-17T00:55:03Z", "openIssues": 61, "openPRs": 20, "issuesOpened90d": 285, "issuesClosed90d": 249, "prsMerged90d": 419, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 0, "other": 6, "latest": "success", "latestAt": "2026-10-16T21:12:29Z" }, "replies": { "sampled": 25, "unanswered": 20, "medianDays": 1.5 } }, "updatedAt": "2026-10-22T07:55:59.665238933Z" } }, "answer": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 6 of 7 scored categories.", "b": { "slug": "sandbox0", "name": "Sandbox0", "vendor": "Lougao, LLC (Sandbox0)", "vendorUrl": "https://sandbox0.ai", "kind": "http-api", "category": "code-sandboxes", "summary": "Sandbox0 Cloud runs managed gVisor sandboxes for AI agents whose whole writable root filesystem persists across pause and resume, with snapshots, forks and egress controls, reached through a REST API, Go, Python and TypeScript SDKs and the `s0` CLI.", "url": "https://www.anchorterminal.com/tools/sandbox0", "markdownUrl": "https://www.anchorterminal.com/tools/sandbox0.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sandbox0.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sandbox0.json", "repo": "https://github.com/sandbox0-ai/sdk-js", "license": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "transports": [ "http" ], "remoteUrl": "https://api.sandbox0.ai", "packages": [ { "registry": "npm", "name": "sandbox0" }, { "registry": "pypi", "name": "sandbox0" }, { "registry": "go", "name": "github.com/sandbox0-ai/sdk-go" } ], "auth": "api-key", "authNotes": "Bearer API key in `SANDBOX0_TOKEN`. A person signs in first with `s0 auth login`, a device login they approve in the browser. Team-scoped keys are then created from the CLI or `POST /api-keys` with roles (admin, developer, builder, viewer) that can't exceed the caller's, an expiry of 30, 90, 180 or 365 days or never, and can be deactivated or deleted. `GET /api-keys/current` returns a key's identity and permissions. Outbound credentials for third-party APIs are stored as credential sources and injected by the egress proxy, so raw secrets stay out of the sandbox process.", "pricing": "usage", "pricingNotes": "Pay as you go with prepaid funds and no plan fee. Compute is $0.015 per GiB-hour of the configured memory limit (about $0.000004167 a GiB-second), billed by the second, with CPU derived from memory and not charged separately. Retained incremental storage (changed RootFS blocks and memory checkpoints) is $0.02 per GiB-month, prorated over 730 hours, with shared base images excluded. Ingress, egress and object-store requests are $0.00, egress \"for now\". New users get a one-time $5 credit with no card. Paused sandboxes are charged for storage only. Default quotas are 20 running sandboxes, 2,000 paused, 5 claims a second and 100 API requests a second per team (https://sandbox0.ai/pricing).", "priceSummary": "$0.015 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, pricing page or the OpenAPI file in the SDK repositories. Funds are prepaid through the dashboard (checked 2026-10-21).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 88, "npmWeekly": 268, "pypiWeekly": 82, "asOf": "2026-10-21" }, "docsUrl": "https://sandbox0.ai/docs/sandbox", "llmsTxt": "https://sandbox0.ai/llms.txt", "openapi": "https://github.com/sandbox0-ai/sdk-go/blob/main/openapi.yaml", "capabilities": [ "sandbox.code", "sandbox.persist", "sandbox.fs", "sandbox.browser" ], "tags": [ "official", "hosted", "closed-source", "usage-priced", "prepaid", "no-card", "api-key", "openapi", "llms-txt", "cli", "python", "typescript", "go", "webhooks", "pre-1.0", "new" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 55.1, "grade": "C", "agentReady": false, "rank": 764, "ranked": true, "rankOf": 1199, "categoryRank": 15, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-21" }, "negative": -3, "negativeNotes": [ "2026-10-16, -3. Self-hosting was discontinued the day it was announced. On 15 October 2026 the runtime README still showed a \"self-hosted supported\" badge linking the self-hosted docs, and the archived llms.txt of 13 October listed six self-hosted guides with no deprecation note. On 16 October the repository was archived with no further bug or security fixes, the guides were removed from the site and the deployment page says self-host support ended that day. No blog post or earlier notice was found. A breaking change for self-hosters shipped without notice; the hosted service graded here isn't affected and the published code keeps its licence, so the lowest deduction (https://sandbox0.ai/docs/sandbox/deployment, https://github.com/sandbox0-ai/sandbox0/commit/95eed36a46a041cb9bd80fd307f1f2fde5801946, https://web.archive.org/web/20261013194906/https://sandbox0.ai/llms.txt)." ], "verdict": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.", "bestFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "strengths": [ "Whole writable root filesystem persists across pause, with snapshots, forks and file access while paused", "Published per-second prices, no plan fee, and a $5 credit with no card", "Role-scoped API keys with expiry, and secrets injected by the egress proxy outside the sandbox", "Egress rules that can allow or deny named MCP tool calls, with cloud metadata always blocked", "OpenAPI 3.0 file of 145 operations, llms.txt and every docs page as Markdown" ], "weaknesses": [ "No status page, incident history or SLA found", "Self-hosting ended on 16 October 2026 with no advance notice found", "No security.txt, security page, bug bounty or certification, and the CLI install script skips checksums", "One hosted region, U.S. East, intended for U.S. customers", "Memory checkpoints and live migration are experimental by the vendor's word" ], "agentNotes": [ "Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.", "Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.", "Back off on 429 `quota_exceeded` and honour Retry-After on claims.", "Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.", "Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.1 } ], "editorialScores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 41 }, "provenanceScore": 55, "checked": { "categories": { "ergonomics": "2026-10-21", "maintenance": "2026-10-21", "payments": "2026-10-21", "reliability": "2026-10-21", "schema": "2026-10-21", "security": "2026-10-21", "transparency": "2026-10-21" }, "last": "2026-10-21", "oldest": "2026-10-21", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install sandbox0 # or npm install sandbox0, or go get github.com/sandbox0-ai/sdk-go", "http": "curl -X POST https://api.sandbox0.ai/api/v1/sandboxes -H \"Authorization: Bearer $SANDBOX0_TOKEN\" -H \"Content-Type: application/json\" -d '{\"template\":\"default\",\"config\":{\"ttl\":300,\"hard_ttl\":3600}}'" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/sandbox0" }, "area": "agent-runtime", "unitPrices": [ { "item": "Compute, per GiB-hour of configured memory", "unit": "compute-unit", "usd": 0.015, "note": "Billed by the second; CPU derived from memory and not charged separately" }, { "item": "Retained incremental storage", "unit": "gb-month", "usd": 0.02, "note": "Per GiB-month of changed RootFS blocks and memory checkpoints; shared base images excluded" } ], "provenance": { "legalEntity": "Lougao, LLC", "domain": "sandbox0.ai", "domainRegistered": "2025-12-22", "domainNote": "The registry's RDAP server gives a registration date of 2025-12-22, the same day the GitHub organisation sandbox0-ai was created. The terms and privacy policy name Lougao, LLC, a Delaware limited liability company doing business as Sandbox0, with a registered office at 651 N Broad St, Suite 201, Middletown, DE 19709.", "endpointOnVendorDomain": true, "terms": "https://sandbox0.ai/terms", "privacy": "https://sandbox0.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-21", "notes": [ "The terms of service (effective 17 June 2026) are between the user and Lougao, LLC under Delaware law and courts. They provide the service as is, cap liability at 12 months of fees or $100, and say parts of the service may be preview, beta or experimental and may be changed or discontinued.", "sandbox0.ai/.well-known/security.txt, /security, /status and /changelog answer 404, and status.sandbox0.ai doesn't resolve. The archived runtime's SUPPORT.md sends security reports to contact@sandbox0.ai.", "robots.txt on sandbox0.ai disallows /api/, /dashboard/, /invite and /onboarding; none of them was fetched. api.sandbox0.ai answers 404 at its root." ], "score": 55 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sandbox0.json", "live": { "slug": "sandbox0", "probe": { "target": "https://api.sandbox0.ai", "method": "get", "lastAt": "2026-10-22T11:16:46.516239968Z", "lastOk": true, "lastStatus": 404, "lastMs": 170, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 177, "p95ms24h": 260, "samples24h": 46, "samples30d": 46, "days": [ { "date": "2026-10-22", "probes": 46, "ok": 46 } ] }, "versions": [ { "registry": "github", "name": "sandbox0-ai/sdk-js", "version": "v0.10.5", "released": "2026-10-21", "seenAt": "2026-10-22T08:14:07.513243287Z" }, { "registry": "npm", "name": "sandbox0", "version": "0.10.5", "seenAt": "2026-10-22T08:14:03.65438415Z" }, { "registry": "pypi", "name": "sandbox0", "version": "0.10.4", "released": "2026-10-08", "seenAt": "2026-10-22T08:14:07.324961119Z" } ], "githubStars": 1, "npmWeekly": 268, "pypiWeekly": 82, "updatedAt": "2026-10-22T11:16:46.516239968Z" } }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Microsoft", "b": "Lougao, LLC (Sandbox0)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.sandbox0.ai", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-17", "b": "2026-10-21", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "couldn't be read", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "1.5k stars, 472k npm/wk", "b": "88 stars, 268 npm/wk, 82 PyPI/wk", "name": "Popularity" }, { "a": "3/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Microsoft Execution Containers or Sandbox0?" }, { "answer": "No hosted endpoint is listed for Microsoft Execution Containers. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.", "question": "Can an agent call Microsoft Execution Containers and Sandbox0 without installing anything?" }, { "answer": "Microsoft Execution Containers is open source (MIT). No open-source release is listed for Sandbox0.", "question": "Are Microsoft Execution Containers and Sandbox0 open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 81 against 38", "Security \u0026 auth, 69 against 58", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 92 against 76", "Transparency \u0026 trust, 83 against 48" ], "also": [ "Agent-ready, a grade of BB or better", "No key needed to call it", "Open source", "No incidents deducted, where Sandbox0 loses 3 points for them" ], "goodFor": "A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.", "slug": "microsoft-execution-containers", "watchFor": "1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased" }, { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "slug": "sandbox0", "watchFor": "No status page, incident history or SLA found" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers.json", "title": "Blaxel Sandboxes vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.json", "title": "Blaxel Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.json", "title": "Cloudflare Sandbox SDK vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.json", "title": "Cloudflare Sandbox SDK vs Sandbox0", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers.json", "title": "Daytona vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0.json", "title": "Daytona vs Sandbox0", "url": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.json", "title": "Deno Sandbox vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.json", "title": "Deno Sandbox vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.json", "title": "E2B vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0.json", "title": "E2B vs Sandbox0", "url": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.json", "title": "Freestyle vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.json", "title": "Freestyle vs Sandbox0", "url": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers.json", "title": "Maritime vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0.json", "title": "Maritime vs Sandbox0", "url": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes.json", "title": "Microsoft Execution Containers vs Modal Sandboxes", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud.json", "title": "Microsoft Execution Containers vs Morph Cloud", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.json", "title": "Microsoft Execution Containers vs Offscreen", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.json", "title": "Microsoft Execution Containers vs SPACE", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop.json", "title": "Microsoft Execution Containers vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites.json", "title": "Microsoft Execution Containers vs Sprites", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox.json", "title": "Microsoft Execution Containers vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.json", "title": "Microsoft Execution Containers vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.json", "title": "Modal Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.json", "title": "Morph Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.json", "title": "Offscreen vs Sandbox0", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.json", "title": "SPACE vs Sandbox0", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0.json", "title": "Runloop Devboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites.json", "title": "Sandbox0 vs Sprites", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.json", "title": "Sandbox0 vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.json", "title": "Sandbox0 vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers.json", "title": "Agent 37 Cloud vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0.json", "title": "Agent 37 Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.json", "title": "DeltaBox Lite vs Microsoft Execution Containers", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.json", "title": "DeltaBox Lite vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0" } ], "scores": [ { "by": 43, "edge": "microsoft-execution-containers", "key": "reliability", "microsoft-execution-containers": 81, "name": "Reliability", "sandbox0": 38, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "microsoft-execution-containers", "key": "schema", "microsoft-execution-containers": 81, "name": "Schema \u0026 documentation", "sandbox0": 77, "weight": 13 }, { "by": 0, "edge": "", "key": "ergonomics", "microsoft-execution-containers": 74, "name": "Agent ergonomics", "sandbox0": 74, "weight": 13 }, { "by": 11, "edge": "microsoft-execution-containers", "key": "security", "microsoft-execution-containers": 69, "name": "Security \u0026 auth", "sandbox0": 58, "weight": 14 }, { "by": 20, "edge": "microsoft-execution-containers", "key": "payments", "microsoft-execution-containers": 60, "name": "Payments \u0026 pricing", "sandbox0": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 16, "edge": "microsoft-execution-containers", "key": "maintenance", "microsoft-execution-containers": 92, "name": "Maintenance \u0026 community", "sandbox0": 76, "weight": 7 }, { "by": 35, "edge": "microsoft-execution-containers", "key": "transparency", "microsoft-execution-containers": 83, "name": "Transparency \u0026 trust", "sandbox0": 48, "weight": 7 } ], "summary": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 6 of 7 scored categories. Both do code sandboxes.", "tutorials": [], "verdicts": { "microsoft-execution-containers": "MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all.", "sandbox0": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0", "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.min.md" }, "markdown": "Microsoft Execution Containers scores 76.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 6 of 7 scored categories. Both do code sandboxes.\n\n- Microsoft Execution Containers: grade BB, 76.3/100, rank #43 of 1199. Markdown https://www.anchorterminal.com/tools/microsoft-execution-containers.md · JSON https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json\n- Sandbox0: grade C, 55.1/100, rank #764 of 1199. Markdown https://www.anchorterminal.com/tools/sandbox0.md · JSON https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 190 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Microsoft Execution Containers (BB)\n\nGood for: A developer building an agent or tool host that must run model-written code on the user's own machine, above all on Windows, where it reaches Microsoft's process and session isolation.\n\nAhead on:\n- Reliability, 81 against 38\n- Security \u0026 auth, 69 against 58\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 92 against 76\n- Transparency \u0026 trust, 83 against 48\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No key needed to call it\n- Open source\n- No incidents deducted, where Sandbox0 loses 3 points for them\n\nWatch for: 1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased\n\n### Sandbox0 (C)\n\nGood for: Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page, incident history or SLA found\n\n\n## Score by category\n\n| Category | Weight | Microsoft Execution Containers | Sandbox0 | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 81 | 38 | Microsoft Execution Containers +43 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 77 | Microsoft Execution Containers +4 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 74 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 69 | 58 | Microsoft Execution Containers +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | Microsoft Execution Containers +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 92 | 76 | Microsoft Execution Containers +16 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 83 | 48 | Microsoft Execution Containers +35 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **76.3 · BB** | **55.1 · C** | |\n\n## Facts side by side\n\n| Fact | Microsoft Execution Containers | Sandbox0 |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Microsoft | Lougao, LLC (Sandbox0) |\n| Hosted endpoint | no (local only) | `https://api.sandbox0.ai` |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Free | Pay per use |\n| x402 | no | no |\n| Licence | MIT | Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-17 | 2026-10-21 |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | couldn't be read | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 1.5k stars, 472k npm/wk | 88 stars, 268 npm/wk, 82 PyPI/wk |\n| Agent reviews | 3/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Microsoft Execution Containers.** MXC puts nine operating-system sandbox backends behind one typed request, with network access denied by default and a JSON Schema for the stable 1.0.0 contract. Version 1.0.0 shipped on 6 October 2026 and 1.0.1 on 17 October. Enforcement varies by backend, and `isolation_session` cannot restrict networking at all.\n\n**Sandbox0.** A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.\n\n## Before you call either\n\n### Microsoft Execution Containers\n\n1. Import from `@microsoft/mxc-sdk/v1`. The package root exports nothing.\n2. Call `getPlatformSupport()` first and stop if `isSupported` is false. `getAvailableBackends()` is advisory and launch-time validation still applies.\n3. Set `network.egress.default` to `allow` only when the task needs it. Omitted network policy resolves to deny in every direction.\n4. Never pass `--audit` to an executor for untrusted code. It turns off all sandbox security for the workload.\n5. Read `ExecutionResult.warnings` after each run. Security warnings arrive there and are not written to stdout or stderr.\n\n### Sandbox0\n\n1. Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.\n2. Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.\n3. Back off on 429 `quota_exceeded` and honour Retry-After on claims.\n4. Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.\n5. Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login.\n\n## Questions\n\n### Which is better for AI agents, Microsoft Execution Containers or Sandbox0?\n\nMicrosoft Execution Containers scores 76.3 (BB) on agent readiness against Sandbox0's 55.1 (C), and leads in 6 of 7 scored categories.\n\n### Can an agent call Microsoft Execution Containers and Sandbox0 without installing anything?\n\nNo hosted endpoint is listed for Microsoft Execution Containers. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.\n\n### Are Microsoft Execution Containers and Sandbox0 open source?\n\nMicrosoft Execution Containers is open source (MIT). No open-source release is listed for Sandbox0.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.json, and with the fewest tokens: https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"microsoft-execution-containers\", \"b\": \"sandbox0\"}`. From a terminal: `anchor compare microsoft-execution-containers sandbox0`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/microsoft-execution-containers.json and https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n\n## Other comparisons with Microsoft Execution Containers or Sandbox0\n\n- [Amazon Bedrock AgentCore Code Interpreter vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-microsoft-execution-containers.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sandbox0](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.md)\n- [Blaxel Sandboxes vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-microsoft-execution-containers.md)\n- [Blaxel Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.md)\n- [Cloudflare Sandbox SDK vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-microsoft-execution-containers.md)\n- [Cloudflare Sandbox SDK vs Sandbox0](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.md)\n- [Daytona vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/daytona-vs-microsoft-execution-containers.md)\n- [Daytona vs Sandbox0](https://www.anchorterminal.com/compare/daytona-vs-sandbox0.md)\n- [Deno Sandbox vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deno-sandbox-vs-microsoft-execution-containers.md)\n- [Deno Sandbox vs Sandbox0](https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.md)\n- [E2B vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/e2b-vs-microsoft-execution-containers.md)\n- [E2B vs Sandbox0](https://www.anchorterminal.com/compare/e2b-vs-sandbox0.md)\n- [Freestyle vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/freestyle-vs-microsoft-execution-containers.md)\n- [Freestyle vs Sandbox0](https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.md)\n- [Maritime vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/maritime-vs-microsoft-execution-containers.md)\n- [Maritime vs Sandbox0](https://www.anchorterminal.com/compare/maritime-vs-sandbox0.md)\n- [Microsoft Execution Containers vs Modal Sandboxes](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-modal-sandboxes.md)\n- [Microsoft Execution Containers vs Morph Cloud](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-morph-cloud.md)\n- [Microsoft Execution Containers vs Offscreen](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.md)\n- [Microsoft Execution Containers vs SPACE](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-perplexity-space.md)\n- [Microsoft Execution Containers vs Runloop Devboxes](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-runloop.md)\n- [Microsoft Execution Containers vs Sprites](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sprites.md)\n- [Microsoft Execution Containers vs Together Code Sandbox](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-together-code-sandbox.md)\n- [Microsoft Execution Containers vs Vercel Sandbox](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-vercel-sandbox.md)\n- [Modal Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.md)\n- [Morph Cloud vs Sandbox0](https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.md)\n- [Offscreen vs Sandbox0](https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.md)\n- [SPACE vs Sandbox0](https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.md)\n- [Runloop Devboxes vs Sandbox0](https://www.anchorterminal.com/compare/runloop-vs-sandbox0.md)\n- [Sandbox0 vs Sprites](https://www.anchorterminal.com/compare/sandbox0-vs-sprites.md)\n- [Sandbox0 vs Together Code Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.md)\n- [Sandbox0 vs Vercel Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/agent37-vs-microsoft-execution-containers.md)\n- [Agent 37 Cloud vs Sandbox0](https://www.anchorterminal.com/compare/agent37-vs-sandbox0.md)\n- [DeltaBox Lite vs Microsoft Execution Containers](https://www.anchorterminal.com/compare/deltabox-lite-vs-microsoft-execution-containers.md)\n- [DeltaBox Lite vs Sandbox0](https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-22", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Microsoft Execution Containers vs Sandbox0", "url": "" } ], "description": "Microsoft Execution Containers scores 76.3 (BB) to Sandbox0's 55.1 (C) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Microsoft Execution Containers BB 76.3", "Sandbox0 C 55.1", "scores" ], "h1": "Microsoft Execution Containers vs Sandbox0", "image": "https://www.anchorterminal.com/assets/og/compare-microsoft-execution-containers-vs-sandbox0.png", "path": "/compare/microsoft-execution-containers-vs-sandbox0", "published": "2026-10-01", "section": "tools", "title": "Microsoft Execution Containers vs Sandbox0 for AI agents (2026)", "toc": null, "updated": "2026-10-22", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0" }, "tokens": { "markdown": 3050, "slim": 730 }, "version": 1 }