Agent Sandboxesagentsandboxes.org
Sandbox profile · Hosted platform

Datalayer Runtimes

Answer in brief

Remote Jupyter kernels as a service for AI agents: stateful CPU or GPU runtimes created on demand from Python or TypeScript, with snapshots of installed packages, files and variables, and a hosted Jupyter MCP Server. Kernels-as-a-service with real statefulness and snapshots, held back by undocumented isolation and pricing.

By the Agent Sandboxes editors · Updated

Overview

Datalayer sells Jupyter-based compute for AI agents. A "Runtime" is a remote kernel you create on demand from the datalayer_core Python SDK (client.create_runtime(environment=..., timeout=...)), the TypeScript client or the CLI, then call execute() on; variables persist between calls within the session, which makes it closer to a code interpreter than to an online judge. Environments are preset: a Python CPU environment and a GPU "AI Environment", each with its own CPU, memory and GPU limits and an hourly burning rate. Secrets are injected as environment variables. Datalayer also hosts the open-source Jupyter MCP Server (BSD-3-Clause, about 1.3k stars) at mcp.datalayer.run so MCP clients such as Claude Code, Codex and Cursor can drive notebooks and sandboxes, and ships the BSD-3-Clause agent-runtimes server for hosting agents on Datalayer runtimes or locally.

Runtimes are time-boxed (timeout in minutes; default not stated on the SDK page) and the environments are described as stateless, so persistent work goes into named snapshots that capture installed packages, files and in-memory variables and can be restored into a new runtime. The isolation mechanism is not documented and no pricing, free tier, regions or compliance details are published outside the JavaScript-rendered marketing site; the SDKs (BSD-3-Clause) were still being pushed in November 2026. Treat it as a young but actively developed kernel-as-a-service rather than a hardened sandbox platform.

Notable

  • datalayer_core SDK 1.2.28 on PyPI (BSD-3-Clause); core and agent-runtimes repos pushed on 9 November 2026
  • Hosted Jupyter MCP Server at mcp.datalayer.run with OAuth 2.1 sign-in and a Claude Code plugin
  • Snapshots capture packages, files and variables but not active network connections

Datalayer Runtimes specifications

AttributeDetails
IsolationNot documented; the SDK describes each runtime as "a clean, isolated Python environment" on cloud machines and the agent-runtimes README refers to a pod's egress boundary, but no hypervisor or container technology is named
DeploymentHosted platform
Open sourceNo
SDKs and interfacesPython, JavaScript/TypeScript, CLI, MCP server, REST API
Cold start (vendor claim)Not documented
Max session lengthRuntimes are created with a timeout in minutes (SDK example: 30); the default and maximum are not stated on the SDK docs
PersistenceStateful kernel: variables persist across execute() calls within a runtime session and are lost on termination; snapshots capture installed packages, files and variables and can seed a new runtime
GPUYes: an "AI Environment" GPU environment alongside the Python CPU environment; GPU models and quotas are not listed
NetworkingNot documented
PricingBilled on actual runtime usage at a per-environment "burning rate" ($/hour); rates are not listed on the public docs and the datalayer.ai site renders only in the browser
Free tierNot documented
ComplianceNot documented
RegionsEnvironments "may vary by account tier and region"; regions not listed

Facts from Datalayer Runtimes’s public documentation, verified November 9, 2026. Performance numbers are vendor claims.

Strengths and trade-offs

Strengths

  • You want a stateful Jupyter kernel an agent can call repeatedly, with GPU environments
  • You need to snapshot an environment (packages, files, variables) and restore it later
  • You are driving notebooks from an MCP client and want a hosted MCP server

Trade-offs

  • Isolation technology, pricing, free tier, regions and compliance are not documented on fetchable pages
  • Runtimes are time-boxed in minutes and environments are stateless without snapshots
  • Small community footprint (core repo about 17 stars) and a fast-moving SDK
  • No self-hosting of the runtime service

Good fit for: Agents that need a stateful, snapshot-able Jupyter kernel (CPU or GPU) rather than a one-shot run.

Use cases Datalayer Runtimes fits

  • Code interpreters: Stateful, snapshot-able Jupyter kernels (CPU or GPU) as a service, for agents that need a kernel rather than a one-shot run.
  • GPU workloads: GPU-backed Jupyter kernels as a service for agents that need a stateful kernel with accelerators.

How Datalayer Runtimes compares

SandboxIsolationOpen sourceSelf-host / BYOCCold start (vendor)Max sessionSnapshots / pauseGPUSDKs
Datalayer RuntimesNot documentedNoNo / NoNot documentedMinutes (set per runtime)Yes / Not documentedYesPython, JavaScript/TypeScript, CLI, MCP server, REST API
Jupyter Kernel GatewayProcess (KG) / pod (EG)YesYes / NoNot documentedUnbounded (culling optional)No / NoNot documentedREST API, Python
E2BFirecracker microVMYesYes / YesNot documented1 h / 24 h (Pro)Yes / YesNoPython, JavaScript/TypeScript
Modal SandboxesgVisor or VMNoNo / Not documented<1 sUp to 24 hYes / YesYesPython, JavaScript/TypeScript, Go
Lightning AI SandboxNot named (isolated Linux env)NoNo / Yesms (claimed)Not documentedYes / YesNoPython, JavaScript/TypeScript, CLI
OpenAI Code Interpreter & Hosted ShellVM (unspecified)NoNo / NoNot documented20 min idleNo / NoNoOpenAI Responses API, Containers API, OpenAI SDKs

See all Datalayer Runtimes alternatives →

Frequently asked questions

What is Datalayer Runtimes?
Remote Jupyter kernels as a service for AI agents: stateful CPU or GPU runtimes created on demand from Python or TypeScript, with snapshots of installed packages, files and variables, and a hosted Jupyter MCP Server. Kernels-as-a-service with real statefulness and snapshots, held back by undocumented isolation and pricing.
How does Datalayer Runtimes isolate code?
Datalayer Runtimes documents its isolation as: Not documented; the SDK describes each runtime as "a clean, isolated Python environment" on cloud machines and the agent-runtimes README refers to a pod's egress boundary, but no hypervisor or container technology is named.
Is Datalayer Runtimes open source?
No, Datalayer Runtimes is not open source.
How much does Datalayer Runtimes cost?
Billed on actual runtime usage at a per-environment "burning rate" ($/hour); rates are not listed on the public docs and the datalayer.ai site renders only in the browser Check the official pricing page for current rates.
What are the alternatives to Datalayer Runtimes?

Sources

  1. datalayer.ai
  2. core.datalayer.tech/python/
  3. core.datalayer.tech/python/Runtimes
  4. core.datalayer.tech/python/Environments
  5. github.com/datalayer/core
  6. github.com/datalayer/agent-runtimes
  7. github.com/datalayer/jupyter-mcp-server
  8. pypi.org/pypi/datalayer_core/json

Cite this page

Agent Sandboxes. (2026). Datalayer Runtimes. agentsandboxes.org. Last reviewed November 9, 2026. https://agentsandboxes.org/sandboxes/datalayer/

Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.