CubeSandbox
A self-hosted sandbox service runs AI agent code in hardware-isolated environments, with E2B SDK compatibility and checkpoint rollback.
CubeSandbox is a self-hosted sandbox service for teams that need AI agents to execute code on their own infrastructure. Each sandbox has its own operating system kernel inside a hardware-isolated MicroVM.
- E2B compatibility: Applications using the E2B SDK can connect to your own sandbox service as an alternative to E2B Cloud.
- Checkpoints and forks: Save the state of a running sandbox, roll back to a checkpoint or fork separate environments for parallel work.
- Network controls: Isolate traffic between sandboxes and restrict outgoing requests by domain, path and HTTP method; the security proxy audits external access and injects credentials without exposing them to sandbox code.
- Shared storage: Volumes persist independently of sandbox lifetimes, can serve multiple sandboxes and support custom storage backends.
- Browser console: Check node readiness and cluster capacity, create sandboxes and view streaming logs in a web interface.
The service supports a single Linux server or a cluster, with x86_64 and native ARM64 support. Its RustVMM and KVM MicroVM deployment path requires KVM support. Deployment options also include ordinary cloud VMs, and Terraform deployment is available for Tencent Cloud.
Resource pooling and snapshot cloning reduce startup overhead. Automatic sandbox pause and resume help reduce idle resource use.
