Vercel Sandbox

Isolated Linux microVMs for running untrusted and AI-generated code.

Each sandbox is its own Firecracker microVM with a dedicated kernel, driven from an SDK or the Vercel CLI. Network egress is firewalled and can inject credentials, snapshots restore a prepared filesystem, and drives keep files across runs. Billed on active CPU; limits vary by Vercel plan.

Vendor
Vercel
Category
Agent infrastructure
Pricing
Freemium
Open source
No
Platforms
Cloud, TypeScript, CLI
Website
vercel.com/sandbox

Features

Best for

More agent infrastructure

Links