{ "data": { "a": { "slug": "offscreen", "name": "Offscreen", "vendor": "Mark Phelps", "vendorUrl": "https://github.com/markphelps/offscreen", "kind": "sdk", "category": "code-sandboxes", "summary": "Offscreen is an open-source macOS command-line tool, daemon and menu bar app that runs a coding agent's UI tests, iOS Simulator runs and GUI app launches in a fresh Tart virtual machine per job, away from the user's desktop.", "url": "https://www.anchorterminal.com/tools/offscreen", "markdownUrl": "https://www.anchorterminal.com/tools/offscreen.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/offscreen.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/offscreen.json", "repo": "https://github.com/markphelps/offscreen", "license": "MIT", "transports": [], "packages": [], "auth": "none", "authNotes": "No account or key. The CLI talks to the local daemon over an owner-only Unix socket (mode 0600), and anyone who can open it is trusted. The daemon reaches each guest VM over SSH with the base image's login, `admin` and `admin` by default, or a configured key. A person grants Local Network to Offscreen Daemon on the first VM job, and Input Monitoring and Notifications to the menu bar app only for host-lane jobs.", "pricing": "free", "pricingNotes": "Free under MIT with nothing to buy. It depends on Tart, installed by the cask from the `openai/tools/tart` formula under FSL-1.1-ALv2, whose licensing page says use on personal computers is royalty-free and organisations above 100 host CPU cores need a paid licence, from $12,000 a year. Needs an Apple silicon Mac with macOS 14 or later and full Xcode.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the docs or the skill (checked 2026-10-17). The tool has no paid tier and makes no network calls of its own beyond the local socket and the guest SSH connection.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://github.com/markphelps/offscreen#readme", "capabilities": [ "sandbox.code", "sandbox.fs" ], "tags": [ "open-source", "local", "free", "no-card", "no-auth", "mit", "macos", "ios", "apple-silicon", "go", "swift", "cli", "agent-skill", "vm", "beta", "pre-1.0", "new" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 62.9, "grade": "B", "agentReady": false, "rank": 467, "ranked": true, "rankOf": 1199, "categoryRank": 10, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 66, "payments": 60, "reliability": 55, "schema": 67, "security": 62, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls.", "bestFor": "A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.", "strengths": [ "A fresh VM per job, deleted afterwards, and a VM task receives only the worktree, listed build products and four `OFFSCREEN_*` variables, not the host environment", "`offscreen run` exits with the wrapped command's code, and Offscreen's own failures use 75 for a queue timeout and 70 for daemon or VM errors", "One queue on the Mac for every agent, terminal and script, with `--detach`, `status`, `logs -f`, `artifacts` and `cancel`", "The skill lists what an agent must not run without asking, such as `--show`, the host lane, `--keep`, prune and image builds", "MIT, with no network code or telemetry found in the source beyond the local socket and guest SSH" ], "weaknesses": [ "First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0", "Apple silicon macOS 14 or later with full Xcode only, at most two VMs at once, and a large one-time image download", "Ad hoc signed and not notarised. The cask strips the quarantine attribute, and there is no SECURITY.md or security.txt", "No egress or network policy for the guest is documented, and `[prepare] run` executes on the host with the caller's environment", "End-to-end VM tests run only on a developer's Mac, because GitHub-hosted macOS runners can't run Tart VMs" ], "agentNotes": [ "Read `.offscreen.toml` before running anything and use its `project` key and task names. Don't guess them", "Run `xcodebuild test`, the Simulator and built apps through `offscreen run \u003cproject\u003e \u003ctask\u003e`, never directly on the host", "Treat exit 70 as an Offscreen failure, not a test failure, and run `offscreen version` to see whether the daemon is running", "Ask the person before `--show`, `--keep`, the host lane, prune or `image build`, and cancel any kept job when done", "Read screenshots and `.xcresult` bundles from the directory `offscreen artifacts \u003cjob\u003e` prints" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.9 } ], "editorialScores": { "ergonomics": 74, "maintenance": 66, "payments": 60, "reliability": 55, "schema": 67, "security": 62, "transparency": 72 }, "provenanceScore": 40, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew install --cask markphelps/tap/offscreen \u0026\u0026 open -a Offscreen \u0026\u0026 offscreen image build", "headless": { "artifacts": "offscreen artifacts \u003cjob\u003e", "check": "offscreen check", "detach": "offscreen run \u003cproject\u003e \u003ctask\u003e --detach", "init": "offscreen init", "oneOff": "offscreen run \u003cproject\u003e -- swift test", "run": "offscreen run \u003cproject\u003e \u003ctask\u003e", "skill": "npx skills add markphelps/offscreen", "status": "offscreen status -a --format json" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/offscreen" }, "area": "agent-runtime", "provenance": { "legalEntity": "Mark Phelps (individual)", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The project has no website. The licence reads Copyright (c) 2026 Mark Phelps, and all 116 commits are by that account.", "The app and daemon use the bundle identifiers io.latentsignal.offscreen and io.latentsignal.offscreend. latentsignal.io belongs to Latent Signal Labs, LLC, a solo studio whose page links x.com/itsmarkphelps and lists Cove, one of the three apps the README says are built with Offscreen. The page does not name Offscreen.", "No terms, privacy policy, changelog file, SECURITY.md or security.txt. GitHub release notes could not be read.", "The software runs on the owner's Mac, so there is no vendor endpoint or status page to check." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/offscreen.json", "live": { "slug": "offscreen", "versions": [ { "registry": "github", "name": "markphelps/offscreen", "version": "v0.0.5", "released": "2026-10-16", "seenAt": "2026-10-22T08:00:46.521179608Z" } ], "githubStars": 4, "github": { "repo": "markphelps/offscreen", "checkedAt": "2026-10-19T06:25:45.669460028Z", "stars": 4, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-16T14:47:05Z", "openIssues": 5, "openPRs": 0, "issuesOpened90d": 7, "issuesClosed90d": 2, "prsMerged90d": 2, "ci": { "branch": "main", "runs": 35, "success": 32, "failure": 3, "other": 0, "latest": "success", "latestAt": "2026-10-16T12:23:21Z" }, "replies": { "sampled": 7, "unanswered": 5, "medianDays": 2.9 } }, "updatedAt": "2026-10-22T08:00:46.521179608Z" } }, "answer": "Offscreen scores 62.9 (B) on agent readiness against Sandbox0's 55.1 (C), and leads in 4 of 7 scored categories. Sandbox0 leads on schema \u0026 documentation and maintenance \u0026 community.", "b": { "slug": "sandbox0", "name": "Sandbox0", "vendor": "Lougao, LLC (Sandbox0)", "vendorUrl": "https://sandbox0.ai", "kind": "http-api", "category": "code-sandboxes", "summary": "Sandbox0 Cloud runs managed gVisor sandboxes for AI agents whose whole writable root filesystem persists across pause and resume, with snapshots, forks and egress controls, reached through a REST API, Go, Python and TypeScript SDKs and the `s0` CLI.", "url": "https://www.anchorterminal.com/tools/sandbox0", "markdownUrl": "https://www.anchorterminal.com/tools/sandbox0.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sandbox0.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sandbox0.json", "repo": "https://github.com/sandbox0-ai/sdk-js", "license": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "transports": [ "http" ], "remoteUrl": "https://api.sandbox0.ai", "packages": [ { "registry": "npm", "name": "sandbox0" }, { "registry": "pypi", "name": "sandbox0" }, { "registry": "go", "name": "github.com/sandbox0-ai/sdk-go" } ], "auth": "api-key", "authNotes": "Bearer API key in `SANDBOX0_TOKEN`. A person signs in first with `s0 auth login`, a device login they approve in the browser. Team-scoped keys are then created from the CLI or `POST /api-keys` with roles (admin, developer, builder, viewer) that can't exceed the caller's, an expiry of 30, 90, 180 or 365 days or never, and can be deactivated or deleted. `GET /api-keys/current` returns a key's identity and permissions. Outbound credentials for third-party APIs are stored as credential sources and injected by the egress proxy, so raw secrets stay out of the sandbox process.", "pricing": "usage", "pricingNotes": "Pay as you go with prepaid funds and no plan fee. Compute is $0.015 per GiB-hour of the configured memory limit (about $0.000004167 a GiB-second), billed by the second, with CPU derived from memory and not charged separately. Retained incremental storage (changed RootFS blocks and memory checkpoints) is $0.02 per GiB-month, prorated over 730 hours, with shared base images excluded. Ingress, egress and object-store requests are $0.00, egress \"for now\". New users get a one-time $5 credit with no card. Paused sandboxes are charged for storage only. Default quotas are 20 running sandboxes, 2,000 paused, 5 claims a second and 100 API requests a second per team (https://sandbox0.ai/pricing).", "priceSummary": "$0.015 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, pricing page or the OpenAPI file in the SDK repositories. Funds are prepaid through the dashboard (checked 2026-10-21).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 88, "npmWeekly": 268, "pypiWeekly": 82, "asOf": "2026-10-21" }, "docsUrl": "https://sandbox0.ai/docs/sandbox", "llmsTxt": "https://sandbox0.ai/llms.txt", "openapi": "https://github.com/sandbox0-ai/sdk-go/blob/main/openapi.yaml", "capabilities": [ "sandbox.code", "sandbox.persist", "sandbox.fs", "sandbox.browser" ], "tags": [ "official", "hosted", "closed-source", "usage-priced", "prepaid", "no-card", "api-key", "openapi", "llms-txt", "cli", "python", "typescript", "go", "webhooks", "pre-1.0", "new" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 55.1, "grade": "C", "agentReady": false, "rank": 764, "ranked": true, "rankOf": 1199, "categoryRank": 15, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-21" }, "negative": -3, "negativeNotes": [ "2026-10-16, -3. Self-hosting was discontinued the day it was announced. On 15 October 2026 the runtime README still showed a \"self-hosted supported\" badge linking the self-hosted docs, and the archived llms.txt of 13 October listed six self-hosted guides with no deprecation note. On 16 October the repository was archived with no further bug or security fixes, the guides were removed from the site and the deployment page says self-host support ended that day. No blog post or earlier notice was found. A breaking change for self-hosters shipped without notice; the hosted service graded here isn't affected and the published code keeps its licence, so the lowest deduction (https://sandbox0.ai/docs/sandbox/deployment, https://github.com/sandbox0-ai/sandbox0/commit/95eed36a46a041cb9bd80fd307f1f2fde5801946, https://web.archive.org/web/20261013194906/https://sandbox0.ai/llms.txt)." ], "verdict": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.", "bestFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "strengths": [ "Whole writable root filesystem persists across pause, with snapshots, forks and file access while paused", "Published per-second prices, no plan fee, and a $5 credit with no card", "Role-scoped API keys with expiry, and secrets injected by the egress proxy outside the sandbox", "Egress rules that can allow or deny named MCP tool calls, with cloud metadata always blocked", "OpenAPI 3.0 file of 145 operations, llms.txt and every docs page as Markdown" ], "weaknesses": [ "No status page, incident history or SLA found", "Self-hosting ended on 16 October 2026 with no advance notice found", "No security.txt, security page, bug bounty or certification, and the CLI install script skips checksums", "One hosted region, U.S. East, intended for U.S. customers", "Memory checkpoints and live migration are experimental by the vendor's word" ], "agentNotes": [ "Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.", "Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.", "Back off on 429 `quota_exceeded` and honour Retry-After on claims.", "Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.", "Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.1 } ], "editorialScores": { "ergonomics": 74, "maintenance": 76, "payments": 40, "reliability": 38, "schema": 77, "security": 58, "transparency": 41 }, "provenanceScore": 55, "checked": { "categories": { "ergonomics": "2026-10-21", "maintenance": "2026-10-21", "payments": "2026-10-21", "reliability": "2026-10-21", "schema": "2026-10-21", "security": "2026-10-21", "transparency": "2026-10-21" }, "last": "2026-10-21", "oldest": "2026-10-21", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install sandbox0 # or npm install sandbox0, or go get github.com/sandbox0-ai/sdk-go", "http": "curl -X POST https://api.sandbox0.ai/api/v1/sandboxes -H \"Authorization: Bearer $SANDBOX0_TOKEN\" -H \"Content-Type: application/json\" -d '{\"template\":\"default\",\"config\":{\"ttl\":300,\"hard_ttl\":3600}}'" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/sandbox0" }, "area": "agent-runtime", "unitPrices": [ { "item": "Compute, per GiB-hour of configured memory", "unit": "compute-unit", "usd": 0.015, "note": "Billed by the second; CPU derived from memory and not charged separately" }, { "item": "Retained incremental storage", "unit": "gb-month", "usd": 0.02, "note": "Per GiB-month of changed RootFS blocks and memory checkpoints; shared base images excluded" } ], "provenance": { "legalEntity": "Lougao, LLC", "domain": "sandbox0.ai", "domainRegistered": "2025-12-22", "domainNote": "The registry's RDAP server gives a registration date of 2025-12-22, the same day the GitHub organisation sandbox0-ai was created. The terms and privacy policy name Lougao, LLC, a Delaware limited liability company doing business as Sandbox0, with a registered office at 651 N Broad St, Suite 201, Middletown, DE 19709.", "endpointOnVendorDomain": true, "terms": "https://sandbox0.ai/terms", "privacy": "https://sandbox0.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-21", "notes": [ "The terms of service (effective 17 June 2026) are between the user and Lougao, LLC under Delaware law and courts. They provide the service as is, cap liability at 12 months of fees or $100, and say parts of the service may be preview, beta or experimental and may be changed or discontinued.", "sandbox0.ai/.well-known/security.txt, /security, /status and /changelog answer 404, and status.sandbox0.ai doesn't resolve. The archived runtime's SUPPORT.md sends security reports to contact@sandbox0.ai.", "robots.txt on sandbox0.ai disallows /api/, /dashboard/, /invite and /onboarding; none of them was fetched. api.sandbox0.ai answers 404 at its root." ], "score": 55 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sandbox0.json", "live": { "slug": "sandbox0", "probe": { "target": "https://api.sandbox0.ai", "method": "get", "lastAt": "2026-10-22T11:16:46.516239968Z", "lastOk": true, "lastStatus": 404, "lastMs": 170, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 177, "p95ms24h": 260, "samples24h": 46, "samples30d": 46, "days": [ { "date": "2026-10-22", "probes": 46, "ok": 46 } ] }, "versions": [ { "registry": "github", "name": "sandbox0-ai/sdk-js", "version": "v0.10.5", "released": "2026-10-21", "seenAt": "2026-10-22T08:14:07.513243287Z" }, { "registry": "npm", "name": "sandbox0", "version": "0.10.5", "seenAt": "2026-10-22T08:14:03.65438415Z" }, { "registry": "pypi", "name": "sandbox0", "version": "0.10.4", "released": "2026-10-08", "seenAt": "2026-10-22T08:14:07.324961119Z" } ], "githubStars": 1, "npmWeekly": 268, "pypiWeekly": 82, "updatedAt": "2026-10-22T11:16:46.516239968Z" } }, "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Mark Phelps", "b": "Lougao, LLC (Sandbox0)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.sandbox0.ai", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-16", "b": "2026-10-21", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "88 stars, 268 npm/wk, 82 PyPI/wk", "name": "Popularity" }, { "a": "3/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Offscreen scores 62.9 (B) on agent readiness against Sandbox0's 55.1 (C), and leads in 4 of 7 scored categories. Sandbox0 leads on schema \u0026 documentation and maintenance \u0026 community.", "question": "Which is better for AI agents, Offscreen or Sandbox0?" }, { "answer": "No hosted endpoint is listed for Offscreen. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.", "question": "Can an agent call Offscreen and Sandbox0 without installing anything?" }, { "answer": "Offscreen is open source (MIT). No open-source release is listed for Sandbox0.", "question": "Are Offscreen and Sandbox0 open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 55 against 38", "Payments \u0026 pricing, 60 against 40", "Transparency \u0026 trust, 56 against 48" ], "also": [ "No key needed to call it", "Open source", "No incidents deducted, where Sandbox0 loses 3 points for them" ], "goodFor": "A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.", "slug": "offscreen", "watchFor": "First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0" }, { "aheadOn": [ "Schema \u0026 documentation, 77 against 67", "Maintenance \u0026 community, 76 against 66" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.", "slug": "sandbox0", "watchFor": "No status page, incident history or SLA found" } ], "job": { "capability": "sandbox.code", "name": "Code sandboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent37-vs-offscreen.json", "title": "Agent 37 Cloud vs Offscreen", "url": "https://www.anchorterminal.com/compare/agent37-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Offscreen", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.json", "title": "Amazon Bedrock AgentCore Code Interpreter vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen.json", "title": "Blaxel Sandboxes vs Offscreen", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.json", "title": "Blaxel Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.json", "title": "Cloudflare Sandbox SDK vs Offscreen", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.json", "title": "Cloudflare Sandbox SDK vs Sandbox0", "url": "https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-offscreen.json", "title": "Daytona vs Offscreen", "url": "https://www.anchorterminal.com/compare/daytona-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0.json", "title": "Daytona vs Sandbox0", "url": "https://www.anchorterminal.com/compare/daytona-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.json", "title": "Deno Sandbox vs Offscreen", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.json", "title": "Deno Sandbox vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-offscreen.json", "title": "E2B vs Offscreen", "url": "https://www.anchorterminal.com/compare/e2b-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0.json", "title": "E2B vs Sandbox0", "url": "https://www.anchorterminal.com/compare/e2b-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-offscreen.json", "title": "Freestyle vs Offscreen", "url": "https://www.anchorterminal.com/compare/freestyle-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.json", "title": "Freestyle vs Sandbox0", "url": "https://www.anchorterminal.com/compare/freestyle-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-offscreen.json", "title": "Maritime vs Offscreen", "url": "https://www.anchorterminal.com/compare/maritime-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0.json", "title": "Maritime vs Sandbox0", "url": "https://www.anchorterminal.com/compare/maritime-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.json", "title": "Microsoft Execution Containers vs Offscreen", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.json", "title": "Microsoft Execution Containers vs Sandbox0", "url": "https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen.json", "title": "Modal Sandboxes vs Offscreen", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.json", "title": "Modal Sandboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen.json", "title": "Morph Cloud vs Offscreen", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.json", "title": "Morph Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space.json", "title": "Offscreen vs SPACE", "url": "https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-runloop.json", "title": "Offscreen vs Runloop Devboxes", "url": "https://www.anchorterminal.com/compare/offscreen-vs-runloop" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-sprites.json", "title": "Offscreen vs Sprites", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox.json", "title": "Offscreen vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox.json", "title": "Offscreen vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.json", "title": "SPACE vs Sandbox0", "url": "https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0.json", "title": "Runloop Devboxes vs Sandbox0", "url": "https://www.anchorterminal.com/compare/runloop-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites.json", "title": "Sandbox0 vs Sprites", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-sprites" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.json", "title": "Sandbox0 vs Together Code Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox" }, { "json": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.json", "title": "Sandbox0 vs Vercel Sandbox", "url": "https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox" }, { "json": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0.json", "title": "Agent 37 Cloud vs Sandbox0", "url": "https://www.anchorterminal.com/compare/agent37-vs-sandbox0" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.json", "title": "DeltaBox Lite vs Offscreen", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen" }, { "json": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.json", "title": "DeltaBox Lite vs Sandbox0", "url": "https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0" } ], "scores": [ { "by": 17, "edge": "offscreen", "key": "reliability", "name": "Reliability", "offscreen": 55, "sandbox0": 38, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "edge": "sandbox0", "key": "schema", "name": "Schema \u0026 documentation", "offscreen": 67, "sandbox0": 77, "weight": 13 }, { "by": 0, "edge": "", "key": "ergonomics", "name": "Agent ergonomics", "offscreen": 74, "sandbox0": 74, "weight": 13 }, { "by": 4, "edge": "offscreen", "key": "security", "name": "Security \u0026 auth", "offscreen": 62, "sandbox0": 58, "weight": 14 }, { "by": 20, "edge": "offscreen", "key": "payments", "name": "Payments \u0026 pricing", "offscreen": 60, "sandbox0": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 10, "edge": "sandbox0", "key": "maintenance", "name": "Maintenance \u0026 community", "offscreen": 66, "sandbox0": 76, "weight": 7 }, { "by": 8, "edge": "offscreen", "key": "transparency", "name": "Transparency \u0026 trust", "offscreen": 56, "sandbox0": 48, "weight": 7 } ], "summary": "Offscreen scores 62.9 (B) on agent readiness against Sandbox0's 55.1 (C), and leads in 4 of 7 scored categories. Sandbox0 leads on schema \u0026 documentation and maintenance \u0026 community. Both do code sandboxes.", "tutorials": [], "verdicts": { "offscreen": "An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls.", "sandbox0": "A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0", "json": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.min.md" }, "markdown": "Offscreen scores 62.9 (B) on agent readiness against Sandbox0's 55.1 (C), and leads in 4 of 7 scored categories. Sandbox0 leads on schema \u0026 documentation and maintenance \u0026 community. Both do code sandboxes.\n\n- Offscreen: grade B, 62.9/100, rank #467 of 1199. Markdown https://www.anchorterminal.com/tools/offscreen.md · JSON https://www.anchorterminal.com/api/v1/tools/offscreen.json\n- Sandbox0: grade C, 55.1/100, rank #764 of 1199. Markdown https://www.anchorterminal.com/tools/sandbox0.md · JSON https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n- Best code execution sandboxes for AI agents: https://www.anchorterminal.com/best/code-sandboxes/index.md\n- All 190 sandboxes comparisons: https://www.anchorterminal.com/compare/code-sandboxes/index.md\n\n## Which one, for what\n\n### Offscreen (B)\n\nGood for: A coding agent working on a macOS or iOS app on the developer's own Apple silicon Mac, which needs to run UI tests, the Simulator or the built app without taking the screen.\n\nAhead on:\n- Reliability, 55 against 38\n- Payments \u0026 pricing, 60 against 40\n- Transparency \u0026 trust, 56 against 48\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n- No incidents deducted, where Sandbox0 loses 3 points for them\n\nWatch for: First commit 11 October 2026, version 0.0.5 and labelled beta, with JSON field names that may change before 1.0\n\n### Sandbox0 (C)\n\nGood for: Products that give each end user a long-lived Linux machine whose installed software and files persist between tasks, paying only for running memory.\n\nAhead on:\n- Schema \u0026 documentation, 77 against 67\n- Maintenance \u0026 community, 76 against 66\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page, incident history or SLA found\n\n\n## Score by category\n\n| Category | Weight | Offscreen | Sandbox0 | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 38 | Offscreen +17 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 67 | 77 | Sandbox0 +10 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 74 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 62 | 58 | Offscreen +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | Offscreen +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 66 | 76 | Sandbox0 +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 56 | 48 | Offscreen +8 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **62.9 · B** | **55.1 · C** | |\n\n## Facts side by side\n\n| Fact | Offscreen | Sandbox0 |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Mark Phelps | Lougao, LLC (Sandbox0) |\n| Hosted endpoint | no (local only) | `https://api.sandbox0.ai` |\n| Transports | | HTTP |\n| Auth | None | API key |\n| Pricing | Free | Pay per use |\n| x402 | no | no |\n| Licence | MIT | Proprietary hosted service under Sandbox0's terms of service (Lougao, LLC, Delaware law); the runtime is closed source since 16 October 2026. The `s0` CLI and the Go, Python and TypeScript SDKs are Apache-2.0 on GitHub. The earlier Apache-2.0 runtime is an archived, unmaintained repository |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-16 | 2026-10-21 |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | none | 88 stars, 268 npm/wk, 82 PyPI/wk |\n| Agent reviews | 3/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Offscreen.** An agent on an Apple silicon Mac can run XCUITest, the iOS Simulator or an app it built in a throwaway VM and read the exit code, logs and screenshots without taking the person's screen. The project is six days old at v0.0.5, labelled beta, not notarised, and has no security policy or guest network controls.\n\n**Sandbox0.** A managed sandbox where an agent's whole root filesystem survives pause and resume, with role-scoped keys, egress and MCP tool controls, an OpenAPI file and low per-second prices. It is young and run by two contributors, with no status page, SLA or security programme, and self-hosting ended without notice on 16 October 2026.\n\n## Before you call either\n\n### Offscreen\n\n1. Read `.offscreen.toml` before running anything and use its `project` key and task names. Don't guess them\n2. Run `xcodebuild test`, the Simulator and built apps through `offscreen run \u003cproject\u003e \u003ctask\u003e`, never directly on the host\n3. Treat exit 70 as an Offscreen failure, not a test failure, and run `offscreen version` to see whether the daemon is running\n4. Ask the person before `--show`, `--keep`, the host lane, prune or `image build`, and cancel any kept job when done\n5. Read screenshots and `.xcresult` bundles from the directory `offscreen artifacts \u003cjob\u003e` prints\n\n### Sandbox0\n\n1. Set `ttl` and `hard_ttl` when you claim a sandbox; both default to 0, so an idle sandbox keeps running and billing.\n2. Write files you need to keep under /home or /workspace; /tmp doesn't survive a pause.\n3. Back off on 429 `quota_exceeded` and honour Retry-After on claims.\n4. Ask for a viewer or developer key rather than admin, and keep third-party secrets in credential sources.\n5. Ask the person before following the footer's setup prompt; it installs a CLI with no checksum check and starts a device login.\n\n## Questions\n\n### Which is better for AI agents, Offscreen or Sandbox0?\n\nOffscreen scores 62.9 (B) on agent readiness against Sandbox0's 55.1 (C), and leads in 4 of 7 scored categories. Sandbox0 leads on schema \u0026 documentation and maintenance \u0026 community.\n\n### Can an agent call Offscreen and Sandbox0 without installing anything?\n\nNo hosted endpoint is listed for Offscreen. Sandbox0 has a hosted endpoint at https://api.sandbox0.ai.\n\n### Are Offscreen and Sandbox0 open source?\n\nOffscreen is open source (MIT). No open-source release is listed for Sandbox0.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.json, and with the fewest tokens: https://www.anchorterminal.com/compare/offscreen-vs-sandbox0.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"offscreen\", \"b\": \"sandbox0\"}`. From a terminal: `anchor compare offscreen sandbox0`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/offscreen.json and https://www.anchorterminal.com/api/v1/tools/sandbox0.json\n\n## Other comparisons with Offscreen or Sandbox0\n\n- [Agent 37 Cloud vs Offscreen](https://www.anchorterminal.com/compare/agent37-vs-offscreen.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Offscreen](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-offscreen.md)\n- [Amazon Bedrock AgentCore Code Interpreter vs Sandbox0](https://www.anchorterminal.com/compare/agentcore-code-interpreter-vs-sandbox0.md)\n- [Blaxel Sandboxes vs Offscreen](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-offscreen.md)\n- [Blaxel Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/blaxel-sandboxes-vs-sandbox0.md)\n- [Cloudflare Sandbox SDK vs Offscreen](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-offscreen.md)\n- [Cloudflare Sandbox SDK vs Sandbox0](https://www.anchorterminal.com/compare/cloudflare-sandbox-sdk-vs-sandbox0.md)\n- [Daytona vs Offscreen](https://www.anchorterminal.com/compare/daytona-vs-offscreen.md)\n- [Daytona vs Sandbox0](https://www.anchorterminal.com/compare/daytona-vs-sandbox0.md)\n- [Deno Sandbox vs Offscreen](https://www.anchorterminal.com/compare/deno-sandbox-vs-offscreen.md)\n- [Deno Sandbox vs Sandbox0](https://www.anchorterminal.com/compare/deno-sandbox-vs-sandbox0.md)\n- [E2B vs Offscreen](https://www.anchorterminal.com/compare/e2b-vs-offscreen.md)\n- [E2B vs Sandbox0](https://www.anchorterminal.com/compare/e2b-vs-sandbox0.md)\n- [Freestyle vs Offscreen](https://www.anchorterminal.com/compare/freestyle-vs-offscreen.md)\n- [Freestyle vs Sandbox0](https://www.anchorterminal.com/compare/freestyle-vs-sandbox0.md)\n- [Maritime vs Offscreen](https://www.anchorterminal.com/compare/maritime-vs-offscreen.md)\n- [Maritime vs Sandbox0](https://www.anchorterminal.com/compare/maritime-vs-sandbox0.md)\n- [Microsoft Execution Containers vs Offscreen](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-offscreen.md)\n- [Microsoft Execution Containers vs Sandbox0](https://www.anchorterminal.com/compare/microsoft-execution-containers-vs-sandbox0.md)\n- [Modal Sandboxes vs Offscreen](https://www.anchorterminal.com/compare/modal-sandboxes-vs-offscreen.md)\n- [Modal Sandboxes vs Sandbox0](https://www.anchorterminal.com/compare/modal-sandboxes-vs-sandbox0.md)\n- [Morph Cloud vs Offscreen](https://www.anchorterminal.com/compare/morph-cloud-vs-offscreen.md)\n- [Morph Cloud vs Sandbox0](https://www.anchorterminal.com/compare/morph-cloud-vs-sandbox0.md)\n- [Offscreen vs SPACE](https://www.anchorterminal.com/compare/offscreen-vs-perplexity-space.md)\n- [Offscreen vs Runloop Devboxes](https://www.anchorterminal.com/compare/offscreen-vs-runloop.md)\n- [Offscreen vs Sprites](https://www.anchorterminal.com/compare/offscreen-vs-sprites.md)\n- [Offscreen vs Together Code Sandbox](https://www.anchorterminal.com/compare/offscreen-vs-together-code-sandbox.md)\n- [Offscreen vs Vercel Sandbox](https://www.anchorterminal.com/compare/offscreen-vs-vercel-sandbox.md)\n- [SPACE vs Sandbox0](https://www.anchorterminal.com/compare/perplexity-space-vs-sandbox0.md)\n- [Runloop Devboxes vs Sandbox0](https://www.anchorterminal.com/compare/runloop-vs-sandbox0.md)\n- [Sandbox0 vs Sprites](https://www.anchorterminal.com/compare/sandbox0-vs-sprites.md)\n- [Sandbox0 vs Together Code Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-together-code-sandbox.md)\n- [Sandbox0 vs Vercel Sandbox](https://www.anchorterminal.com/compare/sandbox0-vs-vercel-sandbox.md)\n- [Agent 37 Cloud vs Sandbox0](https://www.anchorterminal.com/compare/agent37-vs-sandbox0.md)\n- [DeltaBox Lite vs Offscreen](https://www.anchorterminal.com/compare/deltabox-lite-vs-offscreen.md)\n- [DeltaBox Lite vs Sandbox0](https://www.anchorterminal.com/compare/deltabox-lite-vs-sandbox0.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-22", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Offscreen vs Sandbox0", "url": "" } ], "description": "Offscreen scores 62.9 (B) to Sandbox0's 55.1 (C) for code sandboxes. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Offscreen B 62.9", "Sandbox0 C 55.1", "scores" ], "h1": "Offscreen vs Sandbox0", "image": "https://www.anchorterminal.com/assets/og/compare-offscreen-vs-sandbox0.png", "path": "/compare/offscreen-vs-sandbox0", "published": "2026-10-01", "section": "tools", "title": "Offscreen vs Sandbox0 for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-22", "url": "https://www.anchorterminal.com/compare/offscreen-vs-sandbox0" }, "tokens": { "markdown": 2750, "slim": 680 }, "version": 1 }