#88th of 11 in Sandboxes

monty

Embedded Python interpreter in Rust for running LLM-generated code

Stars
8.7k
License
MIT
Last commit
Oct 2026
Last release
Oct 2026
Language
Rust
Stars, last 29 weeks+2,251
1 Apr 2026: 6,497 stars8 Apr 2026: 6,583 stars15 Apr 2026: 6,699 stars22 Apr 2026: 6,845 stars29 Apr 2026: 6,945 stars6 May 2026: 7,000 stars13 May 2026: 7,071 stars20 May 2026: 7,112 stars27 May 2026: 7,159 stars3 Jun 2026: 7,224 stars10 Jun 2026: 7,520 stars17 Jun 2026: 7,654 stars24 Jun 2026: 7,704 stars1 Jul 2026: 7,746 stars8 Jul 2026: 7,783 stars15 Jul 2026: 7,827 stars22 Jul 2026: 7,874 stars29 Jul 2026: 7,912 stars5 Aug 2026: 7,939 stars12 Aug 2026: 7,985 stars19 Aug 2026: 8,037 stars26 Aug 2026: 8,079 stars2 Sept 2026: 8,126 stars9 Sept 2026: 8,161 stars16 Sept 2026: 8,209 stars23 Sept 2026: 8,241 stars30 Sept 2026: 8,481 stars7 Oct 2026: 8,581 stars14 Oct 2026: 8,659 stars21 Oct 2026: 8,748 stars

6,497 on 1 Apr 20268,748 on 21 Oct 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

Monty is a Python 3.14 subset interpreter written in Rust, installed as a Python, JavaScript or Rust package. It runs model-written code with no filesystem, environment variables or network, so the code reaches the host only through functions and mounts the caller passes in. The README reports under 1ms to get a new sandbox from a running pool, compared with about 1500ms for a sandbox service.

Who it is for: Developers running AI-generated Python inside agents without containers

Strengths

  • No filesystem, env vars or network inside; host access only via passed-in functions and mounts
  • Reported under 1ms sandbox start from a pool, versus about 1500ms for a sandbox service
  • Packages for Python (pydantic-monty), npm (@pydantic/monty) and Rust (monty crate)
  • Documents resource limits and snapshots; MIT licensed

Weaknesses

  • Runs only a subset of Python, so some model-written code will not execute
  • Server mode (Full Monty, WebSocket service) is a separate commercial product
  • Go and Dart bindings are community-maintained, not official
  • Latency figures come from the project's own docs, not independent benchmarks

What it needs

  • no GPU

Also in Sandboxes

See all 11
Also in Sandboxes
RankProjectScore
1LightpandaHeadless browser written in Zig for agents and scraping, with CDP and MCP36.8k starsAGPL-3.080 out of 100
2ObscuraRust headless browser with V8 and CDP for scraping and agents29.1k starsApache-2.075 out of 100
3OpenShellPolicy-enforced sandbox runtime for autonomous AI agents Live demo ↗ (opens in a new tab)17k starsApache-2.074 out of 100
#4NemoClawReference stack for running OpenClaw, Hermes and Deep Agents in OpenShell sandboxes22.8k starsApache-2.073 out of 100
#5opensandboxSandbox API for running AI agent code, commands and browsers in isolation16k starsApache-2.067 out of 100