npm · PyPI96Exceptionalhealth index

e2b-dev/E2BOpen-source, secure environment with real-world tools for enterprise-grade agents.
Python · TypeScript★ 14.5K↓ 20.4M/moOct 20, 2026
PyPI95Exceptionalhealth index

vndee/llm-sandboxLightweight and portable LLM sandbox runtime (code interpreter) Python library.
Python★ 1,120↓ 621.6K/moSep 15, 2026
npm94Exceptionalhealth index
TypeScript★ 1,126↓ 1.6M/moSep 10, 2026
PyPI94Exceptionalhealth index
Python★ 347↓ 10.6M/moSep 10, 2026
PyPI · npm · crates.io94Exceptionalhealth index

tensorlakeai/tensorlakeTensorlake is a serverless runtime for sandboxes and deploying background agentic applications
Python · Rust · TypeScript★ 997↓ 305K/moSep 15, 2026
PyPI92Excellenthealth index

runloopai/api-client-pythonOfficial Python SDK for Runloop — secure Linux sandboxes (Devboxes) where AI agents run code, edit files, and expose ports
Python★ 28↓ 502K/moSep 14, 2026
npm · PyPI90Excellenthealth index
Python★ 2,385Aug 27, 2026
npm · RubyGems · Go +286Excellenthealth index

daytona/clientsOfficial SDKs, API clients, and CLI/MCP tools for Daytona, the secure and elastic infrastructure for running AI-generated code
Python · MDX · Java★ 11↓ 5M/moSep 5, 2026
Go · npm81Excellenthealth index

mitos-run/mitosMillisecond microVM sandbox forking for AI agents on Kubernetes. Firecracker VMs that restore from memory snapshots in milliseconds, fork a running VM into N copies, and persist durable, versioned workspaces. Self-hostable, declarative CRDs.
Go★ 89Sep 7, 2026
TypeScript★ 279↓ 129/moSep 10, 2026
npm · PyPI · crates.io73Goodhealth index

getkern/kerna fast, rootless sandbox and virtual resource runtime. Run any workload in a real container, including an agent's tool-call or LLM-generated code.
Rust · Python★ 412↓ 15K/moSep 18, 2026

daytonaio/daytonaDaytona is a Secure and Elastic Infrastructure for Running AI-Generated Code
Mixed★ 71.7KSep 16, 2026

gnana997/crucibleSandbox runtime for AI coding agents. Firecracker microVMs, a single Go binary, snapshot/fork as first-class primitives.
Go · Shell★ 1Sep 10, 2026
PyPI · crates.io65Goodhealth index

bmsuisse/pydenoRun AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.
Python · Rust★ 1↓ 9,772/moOct 10, 2026
npm · PyPI65Goodhealth index

lizard-build/lizard-sdkTypeScript and Python SDKs for Lizard: Kubernetes sandboxes, code execution, persistent files and cloud apps.
Python · TypeScript★ 3↓ 5,675/moOct 13, 2026
npm62Moderatehealth index

isorun/sdkFastest, cheapest, safest agentic runtime
TypeScript★ 7↓ 16.8K/moSep 18, 2026

QwenLM/Qwen-AgentAgent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome extension, etc.
Python★ 17.1K↓ 175.6K/moSep 17, 2026
npm54Moderatehealth index
TypeScript★ 1↓ 4,211/moSep 18, 2026
npm · PyPI · RubyGems +142Weakhealth index

withruntime/runtimeSandboxes for AI agents: TypeScript, Python, Go, Java and Ruby SDKs, the runtime CLI, an MCP server, and agent integrations. Firecracker microVMs.
TypeScript · Python★ 1↓ 8,162/moOct 18, 2026