#66th of 9 in Sandboxes
cubesandbox
MicroVM sandbox service for AI agents with an E2B-compatible API
- Stars
- 12.8k
- License
- custom license
- Last commit
- Oct 2026
- Last release
- Sep 2026
- Language
- Go
Missed the latest GitHub check; these facts may be older.
Overview
CubeSandbox runs each agent sandbox in its own KVM MicroVM, built on RustVMM, and exposes an E2B-compatible API so existing E2B SDK clients can point at it by changing an environment variable. It runs on a single node or a multi-node cluster and includes snapshot/rollback, pause/resume, an eBPF network layer and an L7 egress proxy with credential injection. The README reports under 60ms cold start and under 5MB memory overhead per sandbox.
Who it is for: Teams self-hosting isolated code execution for AI agents
Strengths
- Each sandbox gets a dedicated kernel in its own KVM MicroVM, not shared-kernel containers
- E2B SDK compatible; README says switching needs one environment variable change
- Snapshot, clone and rollback, plus auto pause/resume of idle sandboxes
- Egress proxy injects credentials so API keys never enter the sandbox
Weaknesses
- Requires x86_64 Linux with KVM for the quick start path
- Multi-component stack (API, master, cubelet, eBPF switch, proxy), heavier than a single binary
- Kubernetes deploy and cross-node pause/resume are marked preview
- License detected as NOASSERTION; README badge says Apache 2.0, so verify
What it needs
- no GPU
- Needs KVM, Linux x86_64, S3 (optional, for cross-node pause/resume)
- port 12088
Also in Sandboxes
See all 9| Rank | Project | Score |
|---|---|---|
| 1 | LightpandaHeadless browser written in Zig for agents and scraping, with CDP and MCP | 79 out of 100 |
| 2 | ObscuraRust headless browser with V8 and CDP for scraping and agents | 73 out of 100 |
| 3 | NemoClawReference stack for running OpenClaw, Hermes and Deep Agents in OpenShell sandboxes | 71 out of 100 |
| #4 | OpenShellPolicy-enforced sandbox runtime for autonomous AI agents | 69 out of 100 |
| #5 | microsandboxEmbeddable local microVM sandboxes for running untrusted code and AI agents | 60 out of 100 |