ArchestackBest of Open-Source AI: List on GitHub ↗ (opens in a new tab)

#1717th of 18 in Sandboxes

mxc

Cross-platform sandbox SDK for running untrusted code from models and plugins

Repository on GitHub ↗ (opens in a new tab)
Stars
3.1k
License
MIT
Last commit
Nov 2026
Last release
Oct 2026
Language
Rust

Missed the latest GitHub check; these facts may be older.

Overview

MXC is an embeddable SDK (Rust, .NET, Node) that launches untrusted workloads inside OS-level sandboxes or VMs, driven by JSON container requests with filesystem, network and UI policies. It picks a backend per platform: ProcessContainer on Windows, Bubblewrap on Linux, Seatbelt on macOS, with LXC, Hyperlight, WSLC and others as options. It also has an audit mode to help author policies.

Who it is for: Developers embedding sandboxed execution of untrusted code in their apps

Strengths

  • Native backends on Windows, Linux and macOS behind one JSON request format
  • Separate filesystem, network and UI policies; Node sample sets egress default to deny
  • SDKs for Rust, .NET and Node, published on crates.io, NuGet and npm
  • Audit and debug modes help find access-denied failures when writing policy

Weaknesses

  • Windows Sandbox, MicroVM, Hyperlight and IsolationSession backends are marked experimental
  • Official Microsoft builds send required telemetry on the 1.1.0-alpha contract
  • Network host filtering depends on the backend
  • macOS offers only the Seatbelt backend

What it needs

  • no GPU
  • Needs Rust 1.93 (build from source), Node.js 24+ (build from source), Backend-specific tooling (Bubblewrap, LXC, WSLC)

Also in Sandboxes

See all 18
Also in Sandboxes
RankProjectScore
1LightpandaHeadless browser written in Zig for agents and scraping, with CDP and MCP42k starsAGPL-3.094 out of 100
2OpenShellPolicy-enforced sandbox runtime for autonomous AI agents Live demo ↗ (opens in a new tab)21.5k starsApache-2.089 out of 100
3ObscuraRust headless browser with V8 and CDP for scraping and agents33.3k starsApache-2.087 out of 100
#4opensandboxSandbox API for running AI agent code, commands and browsers in isolation17.2k starsApache-2.087 out of 100
#5NemoClawReference stack for running OpenClaw, Hermes and Deep Agents in OpenShell sandboxes23k starsApache-2.086 out of 100