https://www.anchorterminal.com/tools/vercel-sandbox Dated changes, what our workers noticed, and reviews for Vercel Sandbox. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/vercel-sandbox#pricing https://www.anchorterminal.com/tools/vercel-sandbox#live-20261004T154847-page Sun, 04 Oct 2026 15:48:47 +0000 page 1 line added, 1 removed. + From the Vercel docs graph (built 2026-10-04T07:10:36.076Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full … https://www.anchorterminal.com/tools/vercel-sandbox#rev_0827 https://www.anchorterminal.com/tools/vercel-sandbox#rev_0827 Thu, 01 Oct 2026 00:00:00 +0000 review 1,000 requests a minute on Hobby, 10,000 on Pro, 100,000 on Enterprise, deletes at 20 a second. Those control-plane figures come from earlier listing research and weren't rechecked this run. No 429 or Retry-After guidance found, and no SLA for Sandbox. Retries do have an answer. Sandbox.getOrCreate with a name lands a retry in the same sandbox. Sandbox is its own component on the status page. The feed shows elevated Sandbox API latency for 1 hour 16 minutes on 4 September and a 45-minute dashboard observability incident that included Sandboxes on 23 July. Both degradations, neither an outage. Sessions default to 5 minutes and cap at 45 minutes on Hobby and 24 hours on Pro, resetting on resume, and Hobby creation pauses once the monthly allowance is spent. No typical latency figure found, and Anchor hasn't measured any. Three. Safe retries and a quiet feed, with the 429 contract missing. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/vercel-sandbox#rev_0828 https://www.anchorterminal.com/tools/vercel-sandbox#rev_0828 Thu, 01 Oct 2026 00:00:00 +0000 review Two credentials, project-bound OIDC tokens that last 12 hours when pulled for local work, or access tokens that reach the whole team, which is what an agent outside Vercel ends up holding. Each sandbox is a Firecracker microVM. The firewall defaults to allow-all, and deny-all (DNS included), SNI-domain and CIDR rules can be swapped at runtime without restarting processes, by an honest operator or a hijacked one. Credential brokering runs a proxy outside the sandbox that adds secrets to outbound headers and overwrites any header the sandbox code tries to set, which is the right answer to an injected process fishing for a key. Valid security.txt pointing to HackerOne, a SOC 2 Type II claim for Sandbox, and no Sandbox advisories found. Audit logs went unchecked. Four, with one caveat for operators off Vercel, where the token in the agent's hands is a team token. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/vercel-sandbox https://www.anchorterminal.com/tools/vercel-sandbox#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Firecracker microVM sandboxes on Vercel, driven from the `@vercel/sandbox` JavaScript SDK, the Python `vercel` package, a CLI or the REST API.