Datalayer Runtimes
Remote Jupyter kernels as a service for AI agents: stateful CPU or GPU runtimes created on demand from Python or TypeScript, with snapshots of installed packages, files and variables, and a hosted Jupyter MCP Server. Kernels-as-a-service with real statefulness and snapshots, held back by undocumented isolation and pricing.
Overview
Datalayer sells Jupyter-based compute for AI agents. A "Runtime" is a remote kernel you create on demand from the datalayer_core Python SDK (client.create_runtime(environment=..., timeout=...)), the TypeScript client or the CLI, then call execute() on; variables persist between calls within the session, which makes it closer to a code interpreter than to an online judge. Environments are preset: a Python CPU environment and a GPU "AI Environment", each with its own CPU, memory and GPU limits and an hourly burning rate. Secrets are injected as environment variables. Datalayer also hosts the open-source Jupyter MCP Server (BSD-3-Clause, about 1.3k stars) at mcp.datalayer.run so MCP clients such as Claude Code, Codex and Cursor can drive notebooks and sandboxes, and ships the BSD-3-Clause agent-runtimes server for hosting agents on Datalayer runtimes or locally.
Runtimes are time-boxed (timeout in minutes; default not stated on the SDK page) and the environments are described as stateless, so persistent work goes into named snapshots that capture installed packages, files and in-memory variables and can be restored into a new runtime. The isolation mechanism is not documented and no pricing, free tier, regions or compliance details are published outside the JavaScript-rendered marketing site; the SDKs (BSD-3-Clause) were still being pushed in November 2026. Treat it as a young but actively developed kernel-as-a-service rather than a hardened sandbox platform.
Notable
- datalayer_core SDK 1.2.28 on PyPI (BSD-3-Clause); core and agent-runtimes repos pushed on 9 November 2026
- Hosted Jupyter MCP Server at mcp.datalayer.run with OAuth 2.1 sign-in and a Claude Code plugin
- Snapshots capture packages, files and variables but not active network connections
Datalayer Runtimes specifications
| Attribute | Details |
|---|---|
| Isolation | Not documented; the SDK describes each runtime as "a clean, isolated Python environment" on cloud machines and the agent-runtimes README refers to a pod's egress boundary, but no hypervisor or container technology is named |
| Deployment | Hosted platform |
| Open source | No |
| SDKs and interfaces | Python, JavaScript/TypeScript, CLI, MCP server, REST API |
| Cold start (vendor claim) | Not documented |
| Max session length | Runtimes are created with a timeout in minutes (SDK example: 30); the default and maximum are not stated on the SDK docs |
| Persistence | Stateful kernel: variables persist across execute() calls within a runtime session and are lost on termination; snapshots capture installed packages, files and variables and can seed a new runtime |
| GPU | Yes: an "AI Environment" GPU environment alongside the Python CPU environment; GPU models and quotas are not listed |
| Networking | Not documented |
| Pricing | Billed on actual runtime usage at a per-environment "burning rate" ($/hour); rates are not listed on the public docs and the datalayer.ai site renders only in the browser |
| Free tier | Not documented |
| Compliance | Not documented |
| Regions | Environments "may vary by account tier and region"; regions not listed |
Facts from Datalayer Runtimes’s public documentation, verified November 9, 2026. Performance numbers are vendor claims.
Strengths and trade-offs
Strengths
- You want a stateful Jupyter kernel an agent can call repeatedly, with GPU environments
- You need to snapshot an environment (packages, files, variables) and restore it later
- You are driving notebooks from an MCP client and want a hosted MCP server
Trade-offs
- Isolation technology, pricing, free tier, regions and compliance are not documented on fetchable pages
- Runtimes are time-boxed in minutes and environments are stateless without snapshots
- Small community footprint (core repo about 17 stars) and a fast-moving SDK
- No self-hosting of the runtime service
Good fit for: Agents that need a stateful, snapshot-able Jupyter kernel (CPU or GPU) rather than a one-shot run.
Use cases Datalayer Runtimes fits
- Code interpreters: Stateful, snapshot-able Jupyter kernels (CPU or GPU) as a service, for agents that need a kernel rather than a one-shot run.
- GPU workloads: GPU-backed Jupyter kernels as a service for agents that need a stateful kernel with accelerators.
How Datalayer Runtimes compares
| Sandbox | Isolation | Open source | Self-host / BYOC | Cold start (vendor) | Max session | Snapshots / pause | GPU | SDKs |
|---|---|---|---|---|---|---|---|---|
| Datalayer Runtimes | Not documented | No | No / No | Not documented | Minutes (set per runtime) | Yes / Not documented | Yes | Python, JavaScript/TypeScript, CLI, MCP server, REST API |
| Jupyter Kernel Gateway | Process (KG) / pod (EG) | Yes | Yes / No | Not documented | Unbounded (culling optional) | No / No | Not documented | REST API, Python |
| E2B | Firecracker microVM | Yes | Yes / Yes | Not documented | 1 h / 24 h (Pro) | Yes / Yes | No | Python, JavaScript/TypeScript |
| Modal Sandboxes | gVisor or VM | No | No / Not documented | <1 s | Up to 24 h | Yes / Yes | Yes | Python, JavaScript/TypeScript, Go |
| Lightning AI Sandbox | Not named (isolated Linux env) | No | No / Yes | ms (claimed) | Not documented | Yes / Yes | No | Python, JavaScript/TypeScript, CLI |
| OpenAI Code Interpreter & Hosted Shell | VM (unspecified) | No | No / No | Not documented | 20 min idle | No / No | No | OpenAI Responses API, Containers API, OpenAI SDKs |
Frequently asked questions
What is Datalayer Runtimes?
How does Datalayer Runtimes isolate code?
Is Datalayer Runtimes open source?
How much does Datalayer Runtimes cost?
What are the alternatives to Datalayer Runtimes?
Sources
Cite this page
Agent Sandboxes. (2026). Datalayer Runtimes. agentsandboxes.org. Last reviewed November 9, 2026. https://agentsandboxes.org/sandboxes/datalayer/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.