The independent reference for AI agent sandboxesLast reviewed
Agent Sandboxesagentsandboxes.org
Sandbox profile · Local / OS-level

Docker Sandboxes

Answer in brief

Docker’s sbx CLI for running AI coding agents in microVM sandboxes on your machine, with an experimental Docker-hosted cloud. The easiest way to give local coding agents a real microVM boundary.

By the Agent Sandboxes editors · Updated

Overview

Docker Sandboxes run coding agents such as Claude Code, Codex, Copilot, Gemini CLI and others inside microVMs on your machine. Each sandbox has its own kernel and its own Docker Engine, so agents can build and run containers without touching the host’s Docker.

Network access is deny-by-default and credentials are injected by a host-side proxy. A cloud version on the Docker Agentic Platform is experimental.

Notable

  • Ships templates for a dozen popular coding agents.
  • Does not require Docker Desktop on the host.

Docker Sandboxes specifications

AttributeDetails
IsolationMicroVM with a separate kernel per sandbox, each running its own private Docker Engine
DeploymentLocal / OS-level · Self-hostable
Open sourceNo
SDKs and interfacessbx CLI, TypeScript (cloud), REST API (cloud)
Cold start (vendor claim)Not documented
Max session lengthLocal: persist until removed. Cloud: governed by configured time-to-live
PersistenceLocal sandboxes keep packages and agent state until removed; cloud supports snapshots and volumes; sbx move copies a sandbox between local and cloud
GPULocal only, GPU passthrough on supported hosts; not in cloud sandboxes
NetworkingDeny-by-default network policy; outbound TCP proxied through the host; credentials injected by a host-side proxy so raw keys never enter the VM
PricingCLI and local sandboxes free, including commercial use. Cloud sandboxes metered per second; per-unit rates not published
Free tierLocal use free; one-time credit for cloud sign-ups
ComplianceNot documented
RegionsNot documented

Facts from Docker Sandboxes’s public documentation, verified November 8, 2026. Performance numbers are vendor claims.

Strengths and trade-offs

Strengths

  • You want to let a coding agent run unattended on your laptop safely
  • Your agent needs to build and run Docker containers
  • You want local sandboxes for free

Trade-offs

  • Not open source
  • Cloud offering is experimental with unpublished rates
  • Primarily a developer tool rather than a multi-tenant platform

Best for: Running coding agents unsupervised on a laptop with microVM isolation.

Where Docker Sandboxes ranks

How Docker Sandboxes compares

SandboxIsolationOpen sourceSelf-host / BYOCCold start (vendor)Max sessionSnapshots / pauseGPUSDKs
Docker SandboxesMicroVMNoYes / NoNot documentedUntil removed (local)Yes / YesYessbx CLI, TypeScript (cloud), REST API (cloud)
Anthropic Sandbox RuntimeOS-level (Seatbelt / bubblewrap)YesYes / Not documentedProcess startNot documentedNo / NoNot documentedCLI (srt), TypeScript (npm)
MicrosandboxMicroVM (libkrun)YesYes / Yes<100 msNot documentedYes / Not documentedNoTypeScript, Python, Rust, Go, Ruby, CLI, MCP server
DaytonaContainers or VMsNoNot documented / Yes<90 msUnlimitedYes / YesYesPython, TypeScript, Ruby, Go, Java
E2BFirecracker microVMYesYes / YesNot documented1 h / 24 h (Pro)Yes / YesNoPython, JavaScript/TypeScript

Head-to-head: Docker Sandboxes vs Anthropic Sandbox Runtime

Frequently asked questions

What is Docker Sandboxes?
Docker’s sbx CLI for running AI coding agents in microVM sandboxes on your machine, with an experimental Docker-hosted cloud. The easiest way to give local coding agents a real microVM boundary.
How does Docker Sandboxes isolate code?
Docker Sandboxes documents its isolation as: MicroVM with a separate kernel per sandbox, each running its own private Docker Engine.
Is Docker Sandboxes open source?
No, Docker Sandboxes is not open source.
How much does Docker Sandboxes cost?
CLI and local sandboxes free, including commercial use. Cloud sandboxes metered per second; per-unit rates not published Check the official pricing page for current rates.
What are the best Docker Sandboxes alternatives?
Common alternatives include Anthropic Sandbox Runtime, Microsandbox, Daytona, E2B.

Sources

  1. docs.docker.com/ai/sandboxes/
  2. docs.docker.com/ai/sandboxes/architecture.md
  3. docs.docker.com/ai/sandboxes/security.md
  4. docs.docker.com/ai/sandboxes/cloud/local-vs-cloud.md

Cite this page

Agent Sandboxes. (2026). Docker Sandboxes. agentsandboxes.org. Last reviewed November 8, 2026. https://agentsandboxes.org/sandboxes/docker-sandboxes/

Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.