Devtoolwatch BoardVercel Sandbox review
Vercel Sandbox runs arbitrary or untrusted code in isolated, ephemeral Linux microVMs, controlled through a TypeScript SDK and a CLI.
TL;DR
Vercel Sandbox is an ephemeral compute service for running untrusted, user-generated or agent-generated code in isolated Firecracker microVMs. It suits developers building agent workflows, code playgrounds or live previews on Vercel. It offers an SDK and a CLI, root access, managed and custom OCI images, and Workflow DevKit serialization.
- 218GitHub stars
- +3new stars, week of Oct 25
- ~7.7Mdownloads a week, +9% vs 4-week avg
- #8in Sandboxes and runtimes this week
Vercel Sandbox at a glance
- Category
- Sandboxes and runtimes
- Maintained by
- Vercel (organization, @vercel on GitHub)
- License
- Apache 2.0
- Language
- TypeScript, Dockerfile, HCL
- Repository
- github.com/vercel/sandbox
- Website
- vercel.com/docs/vercel-sandbox
- npm package
- @vercel/sandbox 3.8.0
- Latest release
- [email protected] on GitHub, Oct 19, 2026
- First published
- Jan 23, 2026
What Vercel Sandbox does
- Vercel Sandbox starts isolated Linux VMs built on Firecracker MicroVMs and can seed them from a git repository.
- Vercel Sandbox runs commands inside the VM, streams stdout and stderr, and supports detached commands with opt-in stdin.
- Vercel Sandbox exposes ports through a public domain, so you can open live previews of development servers.
- Vercel Sandbox lets commands run as root with sudo, so you can install packages and system tools such as apt packages.
- Vercel Sandbox boots from managed images for Node.js, Python, Ubuntu or Arch Linux, or from any custom OCI image pushed to Vercel Container Registry.
- Vercel Sandbox instances serialize across Workflow DevKit step boundaries and rehydrate from a snapshot.
- Vercel Sandbox's CLI can extend a running session's timeout with `sandbox extend`.
How it works
You create a sandbox from code with the `@vercel/sandbox` SDK or from the terminal with the `sandbox` CLI. Each sandbox is a Firecracker microVM on Vercel's build infrastructure. The default image is Ubuntu-based with Node.js 24, Bun, Python 3.14 and coding agents. The SDK authenticates with Vercel OIDC tokens or with a team-scoped access token.
How to install and start using Vercel Sandbox
SDK with pnpm
pnpm i @vercel/sandboxSandbox Skill
npx skills add vercel/sandboxRequirements
- A Vercel account and a linked Vercel project.
- A Vercel OIDC token, or a team ID, project ID and access token scoped to that team.
- Custom images must be linux/amd64 OCI images pushed to Vercel Container Registry.
First steps
- Create a project and link it to Vercel with `npm init -y` and `vercel link`.
- Pull a development authentication token into `.env.local` with `vercel env pull`.
- Write an `index.mts` that calls `Sandbox.create()` and `sandbox.runCommand()`.
- Run it with `node --experimental-strip-types --env-file .env.local index.mts`.
Who Vercel Sandbox is for
- Developers running AI agent output, user uploads or third-party scripts away from production systems.
- Teams building code playgrounds, AI-powered UI builders or developer sandboxes.
- Developers testing agent-generated code with logs, file edits and live previews.
- Projects already using Vercel and its Workflow DevKit.
Limitations to know
- Vercel Sandbox caps resources at 8 vCPUs on Hobby and Pro and 32 vCPUs on Enterprise, with 2048 MB memory per vCPU.
- Vercel Sandbox sessions default to 5 minutes and last at most 45 minutes on Hobby or 24 hours on Pro and Enterprise.
- Vercel Sandbox development tokens expire after 12 hours, so you must run `vercel env pull` again.
- Vercel Sandbox is tied to Vercel infrastructure. It needs a Vercel account, and custom images go through Vercel Container Registry.
Is Vercel Sandbox growing? Usage data
In the week of Oct 25–31, 2026, Vercel Sandbox ranked #232 on the Devtoolwatch Board and #8 in Sandboxes and runtimes, with a momentum score of 40 out of 100. Its main package had about 7.7M downloads that week, +9% against its own 4-week average.
Show the weekly numbers
| Week of | New stars |
|---|---|
| Aug 9, 2026 | 12 |
| Aug 16, 2026 | 8 |
| Aug 23, 2026 | 3 |
| Aug 30, 2026 | 2 |
| Sep 6, 2026 | 3 |
| Sep 13, 2026 | 3 |
| Sep 20, 2026 | 3 |
| Sep 27, 2026 | 4 |
| Oct 4, 2026 | 2 |
| Oct 11, 2026 | 2 |
| Oct 18, 2026 | 3 |
| Oct 25, 2026 | 3 |
On Hacker News
- Turbopack, the successor to Webpack, 626 points and 312 comments (Oct 25, 2022)
- AGENTS.md outperforms skills in our agent evals, 524 points and 196 comments (Jan 29, 2026)
- Vercel raise $40M Series B, 350 points and 197 comments (Dec 16, 2020)
- Vercel, formerly Zeit, raises $21M Series A, 325 points and 190 comments (Apr 21, 2020)
- Storage on Vercel, 267 points and 139 comments (May 1, 2023)
The Board ranks tools by four signals each week: new stars, new stars for the repo's size, added downloads and download growth beyond the market. How the ranking works.
Vercel Sandbox alternatives
Other AI sandboxes and runtimes on the Board in the week of Oct 25–31, 2026, by momentum:
| Rank | Tool | Stars | Downloads/wk |
|---|---|---|---|
| #1 | OpenSandboxOpenSandbox is a sandbox runtime that gives AI agents isolated environments to run code, commands, files, browsers, and desktops on your… | 16.3k | 328.9k |
| #2 | microsandboxmicrosandbox is a local-first microVM runtime and library for running untrusted workloads like AI agents, user code, and CI jobs in… | 8.9k | 26.8k |
| #3 | E2BE2B is open-source infrastructure for running AI-generated code in secure, isolated cloud sandboxes, controlled through JavaScript and… | 14.6k | 5M |
| #4 | Agent Sandboxagent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and… | 4.5k | – |
| #5 | Trigger.devTrigger.dev is an open-source TypeScript platform for building and deploying durable AI agents, workflows, and long-running background… | 16.7k | 1.7M |
| #6 | InngestInngest is a workflow orchestration platform for running durable step functions, background jobs, and AI workflows on serverless,… | 6k | 3.7M |
Recent Vercel Sandbox releases
- [email protected], Oct 19, 2026
- @vercel/[email protected], Oct 13, 2026
- @vercel/[email protected], Oct 13, 2026
- [email protected], Oct 13, 2026
- @vercel/[email protected], Oct 12, 2026
Vercel Sandbox FAQ
Is Vercel Sandbox free and open source?
Yes. Vercel Sandbox's source code is on GitHub (vercel/sandbox) under the Apache 2.0 license, so you can use it for free. Its website also links to a pricing page (https://vercel.com/docs/pricing) for any paid plans.
How do I install Vercel Sandbox?
Run pnpm i @vercel/sandbox. The install section above has the other options from the project's README.
Is Vercel Sandbox still maintained?
Yes. The vercel/sandbox repository was last updated on Oct 21, 2026, and the latest release, [email protected] on GitHub, came out on Oct 19, 2026.
How popular is Vercel Sandbox?
Vercel Sandbox has 218 GitHub stars as of Nov 1, 2026. It gained 3 new stars in the week of Oct 25–31, 2026, against a 12-week average of 4 a week. Its main package had about 7.7M downloads that week, +9% against its own 4-week average. That made it #8 among AI sandboxes and runtimes on the Devtoolwatch Board.
Vercel Sandbox vs E2B: how do they compare?
Vercel Sandbox and E2B are both tracked by Devtoolwatch as AI sandboxes and runtimes. Vercel Sandbox has 218 GitHub stars and E2B has 14.6k. In the week of Oct 25–31, 2026, Vercel Sandbox's main package had 7.7M downloads and E2B's had 5M. E2B is open-source infrastructure for running AI-generated code in secure, isolated cloud sandboxes, controlled through JavaScript and Python SDKs. E2B review.
Vercel Sandbox vs Daytona: how do they compare?
Vercel Sandbox and Daytona are both tracked by Devtoolwatch as AI sandboxes and runtimes. Vercel Sandbox has 218 GitHub stars and Daytona has 71.4k. In the week of Oct 25–31, 2026, Vercel Sandbox's main package had 7.7M downloads and Daytona's had 980.1k. Daytona is infrastructure for running AI-generated code in isolated sandboxes, controlled through SDKs, a REST API, and a CLI. Daytona review.
What are the best alternatives to Vercel Sandbox?
Other AI sandboxes and runtimes on the Devtoolwatch Board in the week of Oct 25–31, 2026, by momentum: OpenSandbox (#1), microsandbox (#2), E2B (#3), Agent Sandbox (#4), Trigger.dev (#5). The alternatives table above has their numbers.
What is Vercel Sandbox?
Vercel Sandbox is an ephemeral compute primitive for safely running untrusted or user-generated code. Each sandbox is an isolated Linux Firecracker microVM, controlled through the @vercel/sandbox SDK or the sandbox CLI.
What software comes in the default Vercel Sandbox image?
The default image is vercel/sandbox/universal:latest, which is based on Ubuntu. It includes Node.js 24, Bun, Python 3.14, coding agents, and common development and debugging utilities. It runs as the ubuntu user with passwordless sudo.
How long can a Vercel Sandbox run?
A Vercel Sandbox runs for 5 minutes by default. You can raise this with the timeout option up to 45 minutes on Hobby or 24 hours on Pro and Enterprise. The CLI's sandbox extend command lengthens a running session.
Can I use my own image in Vercel Sandbox?
Yes. Vercel Sandbox can boot from any OCI image that you push to Vercel Container Registry. You then pass the image name to Sandbox.create(). You can push with vercel vcr build or with OCI tools such as buildah or podman.
How does Vercel Sandbox authenticate?
Vercel Sandbox uses Vercel OIDC tokens when they are available, which is the recommended method. Where VERCEL_OIDC_TOKEN is unavailable, you can pass a team ID, a project ID and an access token to Sandbox.create() instead.
Sources
- vercel/sandbox on GitHub
- Vercel Sandbox README
- @vercel/sandbox on npm
- Vercel Sandbox website
- Release [email protected] (Oct 19, 2026)
- Release @vercel/[email protected] (Oct 13, 2026)
- Release @vercel/[email protected] (Oct 13, 2026)
- Hacker News: Turbopack, the successor to Webpack
- Hacker News: AGENTS.md outperforms skills in our agent evals
- Hacker News: Vercel raise $40M Series B
- Devtoolwatch Board, the week of Oct 25–31, 2026
Vercel Sandbox README badge
Maintainers can show the tool's weekly Board rank in their README:
[](https://index.devtoolwatch.com/tools/vercel-sandbox/)How this page is made: Devtoolwatch writes each review from the project's README, releases, package metadata and website, with an AI model, then checks every claim against the source it cites and drops what the sources don't support. The numbers come from Devtoolwatch's daily GitHub snapshots, GitHub's stargazer history, and the npm and PyPI download APIs. Spotted an error? Email [email protected].