Run Coding Agents in Sandboxes. Control Them Over HTTP. Supports Claude Code, Codex, OpenCode, and Amp. https://sandboxagent.dev
Find a file
Nathan Flurry cbd36eeca8 fix: detect musl/glibc at runtime for correct Claude binary download
Previously used cfg!(target_env = "musl") which checks compile-time,
causing musl-compiled sandbox-agent to always download musl binaries
even on glibc systems like Debian/E2B.

Now checks for /lib/ld-musl-*.so.1 at runtime to detect the actual
system libc and download the correct Claude binary variant.
2026-01-28 04:19:35 -08:00
.agents/skills/agent-browser chore: sync workspace changes 2026-01-27 05:06:33 -08:00
.claude/skills chore: sync workspace changes 2026-01-27 05:06:33 -08:00
.codex/skills chore: sync workspace changes 2026-01-27 05:06:33 -08:00
.github chore(site): banner 2026-01-28 02:26:40 -08:00
.opencode/skills skills 2026-01-25 00:23:08 -08:00
docker fix: explicitly set TARGETARCH for Docker multi-arch builds 2026-01-28 02:06:59 -08:00
docs fix: detect musl/glibc at runtime for correct Claude binary download 2026-01-28 04:19:35 -08:00
examples fix: detect musl/glibc at runtime for correct Claude binary download 2026-01-28 04:19:35 -08:00
frontend wip examples and content 2026-01-28 02:56:22 -08:00
research feat: add turn streaming and inspector updates 2026-01-27 06:18:43 -08:00
resources chore: update landing and inspector content 2026-01-27 22:29:35 -08:00
scripts fix: detect musl/glibc at runtime for correct Claude binary download 2026-01-28 04:19:35 -08:00
sdks chore: sync workspace changes 2026-01-28 01:13:50 -08:00
server fix: detect musl/glibc at runtime for correct Claude binary download 2026-01-28 04:19:35 -08:00
spec feat: add turn streaming and inspector updates 2026-01-27 06:18:43 -08:00
.gitignore wip 2026-01-28 01:46:55 -08:00
AGENTS.md chore: symlink AGENTS.md to CLAUDE.md 2026-01-24 23:20:40 -08:00
Cargo.toml fix: add version to workspace dependencies for crates.io publishing 2026-01-27 20:42:26 -08:00
CLAUDE.md wip examples and content 2026-01-28 02:56:22 -08:00
CONTRIBUTING.md fix: add agent_server_logs module import to lib.rs 2026-01-27 17:24:42 -08:00
justfile fix: add agent_server_logs module import to lib.rs 2026-01-27 17:24:42 -08:00
LICENSE refactor: rename sandbox-daemon to sandbox-agent 2026-01-25 02:30:12 -08:00
package.json chore: sync workspace changes 2026-01-27 05:06:33 -08:00
pnpm-lock.yaml fix: detect musl/glibc at runtime for correct Claude binary download 2026-01-28 04:19:35 -08:00
pnpm-workspace.yaml wip examples and content 2026-01-28 02:56:22 -08:00
README.md wip examples and content 2026-01-28 02:56:22 -08:00
turbo.json fix: skip OpenAPI generation in CI to speed up setup step 2026-01-27 21:01:15 -08:00

Sandbox Agent SDK

Universal API for automatic coding agents in sandboxes. Supports Claude Code, Codex, OpenCode, and Amp.

  • Any coding agent: Universal API to interact with all agents with full feature coverage
  • Server or SDK mode: Run as an HTTP server or with the TypeScript SDK
  • Universal session schema: Universal schema to store agent transcripts
  • Supports your sandbox provider: Daytona, E2B, Vercel Sandboxes, and more
  • Lightweight, portable Rust binary: Install anywhere with 1 curl command
  • Automatic agent installation: Agents are installed on-demand when first used
  • OpenAPI spec: https://sandboxagent.dev/docs/api

DocumentationDiscord

Agent Compatibility

Feature Claude Code* Codex OpenCode Amp
Stability Stable Stable Experimental Experimental
Text Messages
Tool Calls —*
Tool Results —*
Questions (HITL) —*
Permissions (HITL) —*
Images
File Attachments
Session Lifecycle
Error Events
Reasoning/Thinking
Command Execution
File Changes
MCP Tools
Streaming Deltas
  • Claude headless CLI does not natively support tool calls/results or HITL questions/permissions yet; these are WIP.

Want support for another agent? Open an issue to request it.

Architecture

Agent Architecture Diagram

The Sandbox Agent acts as a universal adapter between your client application and various coding agents (Claude Code, Codex, OpenCode, Amp). Each agent has its own adapter (e.g., claude_adapter.rs) that handles the translation between the universal API and the agent-specific interface.

  • Embedded Mode: Runs agents locally as subprocesses
  • Server Mode: Runs as HTTP server from any sandbox provider

Documentation

Components

  • Server: Rust daemon (sandbox-agent server) exposing the HTTP + SSE API.
  • SDK: TypeScript client with embedded and server modes.
  • Inspector: https://inspect.sandboxagent.dev for browsing sessions and events.
  • CLI: sandbox-agent (same binary, plus npm wrapper) mirrors the HTTP endpoints.

Quickstart

Skill

Install skill with:

npx skills add https://sandboxagent.dev/docs

SDK

Install

npm install sandbox-agent

Setup

Local (embedded mode):

import { SandboxAgent } from "sandbox-agent";

const client = await SandboxAgent.start();

Remote (server mode):

import { SandboxAgent } from "sandbox-agent";

const client = await SandboxAgent.connect({
  baseUrl: "http://127.0.0.1:2468",
  token: process.env.SANDBOX_TOKEN,
});

API Overview

const agents = await client.listAgents();

await client.createSession("demo", {
  agent: "codex",
  agentMode: "default",
  permissionMode: "plan",
});

await client.postMessage("demo", { message: "Hello from the SDK." });

for await (const event of client.streamEvents("demo", { offset: 0 })) {
  console.log(event.type, event.data);
}

Documentation

Server

Install the binary (fastest installation, no Node.js required):

# Install it
curl -fsSL https://releases.sandboxagent.dev/sandbox-agent/latest/install.sh | sh
# Run it
sandbox-agent server --token "$SANDBOX_TOKEN" --host 127.0.0.1 --port 2468

Optional: preinstall agent binaries (no server required; they will be installed lazily on first use if you skip this):

sandbox-agent install-agent claude
sandbox-agent install-agent codex
sandbox-agent install-agent opencode
sandbox-agent install-agent amp

To disable auth locally:

sandbox-agent server --no-token --host 127.0.0.1 --port 2468

Documentation Integration guides

CLI

Install the CLI wrapper (optional but convenient):

npm install -g @sandbox-agent/cli

Create a session and send a message:

sandbox-agent api sessions create my-session --agent codex --endpoint http://127.0.0.1:2468 --token "$SANDBOX_TOKEN"
sandbox-agent api sessions send-message my-session --message "Hello" --endpoint http://127.0.0.1:2468 --token "$SANDBOX_TOKEN"
sandbox-agent api sessions send-message-stream my-session --message "Hello" --endpoint http://127.0.0.1:2468 --token "$SANDBOX_TOKEN"

You can also use npx like:

npx sandbox-agent --help

Documentation

Tip: Extract credentials

Often you need to use your personal API tokens to test agents on sandboxes:

sandbox-agent credentials extract-env --export

This prints environment variables for your OpenAI/Anthropic/etc API keys to test with Sandbox Agent SDK.

FAQ

Does this replace the Vercel AI SDK?

No, they're complementary. AI SDK is for building chat interfaces and calling LLMs. This SDK is for controlling autonomous coding agents that write code and run commands. Use AI SDK for your UI, use this when you need an agent to actually code.

Which coding agents are supported?

Claude Code, Codex, OpenCode, and Amp. The SDK normalizes their APIs so you can swap between them without changing your code.

How is session data persisted?

This SDK does not handle persisting session data. Events stream in a universal JSON schema that you can persist anywhere. Consider using Postgres or Rivet Actors for data persistence.

Can I run this locally or does it require a sandbox provider?

Both. Run locally for development, deploy to E2B, Daytona, or Vercel Sandboxes for production.

Does it support [platform]?

The server is a single Rust binary that runs anywhere with a curl install. If your platform can run Linux binaries (Docker, VMs, etc.), it works. See the deployment guides for E2B, Daytona, and Vercel Sandboxes.

Can I use this with my personal API keys?

Yes. Use sandbox-agent credentials extract-env to extract API keys from your local agent configs (Claude Code, Codex, OpenCode, Amp) and pass them to the sandbox environment.

Why Rust and not [language]?

Rust gives us a single static binary, fast startup, and predictable memory usage. That makes it easy to run inside sandboxes or in CI without shipping a large runtime, such as Node.js.

Project Goals

This project aims to solve 3 problems with agents:

  • Universal Agent API: Claude Code, Codex, Amp, and OpenCode all have put a lot of work in to the agent scaffold. Each have respective pros and cons and need to be easy to be swapped between.
  • Agent Transcript: Maintaining agent transcripts is difficult since the agent manages its own sessions. This provides a simpler way to read and retrieve agent transcripts in your system.
  • Agents In Sandboxes: There are many complications with running agents inside of sandbox providers. This lets you run a simple curl command to spawn an HTTP server for using any agent from within the sandbox.

Features out of scope:

  • Storage of sessions on disk: Sessions are already stored by the respective coding agents on disk. It's assumed that the consumer is streaming data from this machine to an external storage, such as Postgres, ClickHouse, or Rivet.
  • Direct LLM wrappers: Use the Vercel AI SDK if you want to implement your own agent from scratch.
  • Git Repo Management: Just use git commands or the features provided by your sandbox provider of choice.
  • Sandbox Provider API: Sandbox providers have many nuanced differences in their API, it does not make sense for us to try to provide a custom layer. Instead, we opt to provide guides that let you integrate this project with sandbox providers.

Roadmap

  • Python SDK
  • Automatic MCP & skill & hook configuration
  • Todo lists