Leap0
Firecracker microVM sandboxes in public preview, free during preview, with memory snapshots, forks, a per-sandbox firewall with credential-injecting header transforms and an XFCE desktop. Feature-rich and free for now, but a preview service to trial rather than to build production dependencies on until billing and stability are settled.
Overview
Leap0 is a hosted sandbox service in public preview. Each sandbox is a Firecracker microVM with its own kernel, with the VMM jailed by chroot, cgroup v2 and seccomp. Templates can be any container image from public registries or private ECR, Artifact Registry or ACR. The feature set is broad for a preview product: Python, TypeScript and Go SDKs plus an MCP server; a code interpreter; filesystem, git, process and PTY APIs; Python and TypeScript language servers; SSH and VNC; and a full XFCE desktop at 1440x900 with screenshots, mouse, keyboard and screen recording for computer-use agents.
Snapshots capture memory and writable disk and can be forked into many sandboxes; sandboxes run 1–8 vCPU, 512 MiB–8 GB and 10 GiB disk with a timeout of up to 8 hours. Networking is locked down by a per-sandbox firewall whose header transforms let secrets be injected outside the sandbox. The service is free during the preview, with per-second vCPU and memory rates published for when billing starts; the preview page warns that breaking changes and short downtime may occur. Sandboxes run only in the US, no compliance information is published, and the vendor offers BYOC and on-premises deployment through sales.
Notable
- Public preview: free, no card, with the docs stating "Breaking changes may happen" and "Short periods of downtime may occur".
- Limits: 1–8 vCPU, 512 MiB–8 GB memory, 10 GiB disk, timeout 1 minute to 8 hours, 1,000 API requests per 60 seconds.
- Published future rates match E2B's per-second figures: $0.000014 per vCPU-second and $0.0000045 per GB-second.
Leap0 specifications
| Attribute | Details |
|---|---|
| Isolation | Firecracker microVM with a dedicated Linux kernel per sandbox; the VMM process is jailed with chroot, cgroup v2, seccomp filters and unique UID/GID pairs |
| Deployment | Hosted platform · BYOC available |
| Open source | No |
| SDKs and interfaces | Python, JavaScript/TypeScript, Go, MCP server |
| Cold start (vendor claim) | Website: "Sandboxes boot in around 100ms" (vendor claim) |
| Max session length | Sandbox timeout from 1 minute to 8 hours, default 5 minutes; limits may change during the public preview |
| Persistence | Point-in-time snapshots of a running sandbox including in-memory state and writable disk; pause, snapshot and resume across sessions; fork one snapshot into many parallel sandboxes; 10 GiB disk per sandbox |
| GPU | Not documented |
| Networking | Per-sandbox firewall with domain allowlists, CIDR rules and header transforms that inject secrets outside the sandbox; demo shows outbound TCP blocked and DNS restricted by default; HTTP/SSE/WebSocket access to apps inside the sandbox |
| Pricing | Free during public preview. Rates to apply when billing goes live: $0.0504 per vCPU-hour ($0.000014 per second) and $0.0162 per GB-hour ($0.0000045 per GB-second) |
| Free tier | Free during public preview, no credit card required |
| Compliance | Not documented |
| Regions | United States only; more regions planned |
Facts from Leap0’s public documentation, verified November 9, 2026. Performance numbers are vendor claims.
Strengths and trade-offs
Strengths
- You want to evaluate a microVM sandbox with desktop, LSP and git support at no cost.
- You need memory-inclusive snapshots and forks for parallel exploration.
- You want outbound secrets injected by the firewall rather than placed in the sandbox.
- You run computer-use agents and want a ready XFCE desktop with recording.
Trade-offs
- Public preview with explicit warnings of breaking changes and downtime; billing not yet live.
- US region only; sessions capped at 8 hours.
- No compliance information; the company behind it is not named on the site.
- Small public footprint: SDK repositories have single-digit GitHub stars.
Good fit for: Trying a full-featured microVM sandbox (desktop, LSP, git, snapshots) at no cost while it is in public preview.
How Leap0 compares
| Sandbox | Isolation | Open source | Self-host / BYOC | Cold start (vendor) | Max session | Snapshots / pause | GPU | SDKs |
|---|---|---|---|---|---|---|---|---|
| Leap0 | Firecracker microVM | No | No / Yes | ~100 ms (claim) | 8 h max | Yes / Yes | Not documented | Python, JavaScript/TypeScript, Go, MCP server |
| E2B | Firecracker microVM | Yes | Yes / Yes | Not documented | 1 h / 24 h (Pro) | Yes / Yes | No | Python, JavaScript/TypeScript |
| InstaVM | Firecracker microVM | No | No / No | <200 ms (claim) | Configurable | Yes / Yes | Not documented | Python, JavaScript/TypeScript, CLI, REST API |
| Superserve | Firecracker microVM | No | No / Yes | Not documented | Unlimited | Yes / Yes | Not documented | Python, JavaScript/TypeScript, CLI, REST API, MCP server |
| Runtime | Firecracker microVM | No | No / No | Not documented | No limit documented | Yes / Yes | Not documented | JavaScript/TypeScript, Python, Go, Ruby, Java, CLI, REST API, MCP server |
| Morph Cloud | VM | No | No / Not documented | <250 ms (restore) | Configurable | Yes / Yes | Not documented | Python, TypeScript |
| Scrapybara | Not documented | No | No / No | <1 s (claimed) | 1 h default, configurable | No / Yes | No | Python, JavaScript/TypeScript, REST API, MCP server, CLI |
Frequently asked questions
What is Leap0?
How does Leap0 isolate code?
Is Leap0 open source?
How much does Leap0 cost?
What are the alternatives to Leap0?
Sources
Cite this page
Agent Sandboxes. (2026). Leap0. agentsandboxes.org. Last reviewed November 9, 2026. https://agentsandboxes.org/sandboxes/leap0/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.