sandbox
All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.
- 6.2k stars
- 564 forks
- 73 open issues
- Language: Python
- License: Apache-2.0
- updated
Install
git clone https://github.com/agent-infra/sandbox && cp sandbox/*.md ~/.claude/agents/- Clone the repository and copy the agent .md definitions into ~/.claude/agents (or .claude/agents inside a project).
- Start a new Claude Code session to load the agents.
- Delegate work to them with the Task/Agent tool or by name.
Editor's note
AIO Sandbox packages a browser, shell, file system, VSCode Server, Jupyter Notebook, and MCP server into a single Docker container, giving AI agents a shared execution environment where files created in one tool are immediately accessible in another. The container exposes interfaces over a single port: a VNC remote desktop at `/vnc/`, a VSCode Server at `/code-server/`, and MCP-compatible API endpoints at `/mcp`, all reachable at `localhost:8080` after a one-line Docker run command. Agents interact with the environment through Python (`agent-sandbox`), TypeScript (`@agent-infra/sandbox`), or Go SDKs that wrap shell execution, file reads/writes, and browser screenshot calls. The browser layer supports VNC for visual interaction, Chrome DevTools Protocol for programmatic control, and MCP for higher-level automation. The project targets developers building Claude-based or other LLM-driven agents who need a reproducible, multi-capability sandbox without wiring together separate containers or managing cross-tool file sharing manually.
Subagents overview
What people ask about sandbox
What is agent-infra/sandbox?
agent-infra/sandbox is subagents for the Claude AI ecosystem. All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container. It has 6.2k GitHub stars and its last recorded update is dated 2026-09-14.
How do I install sandbox?
You can install sandbox by cloning the repository (https://github.com/agent-infra/sandbox) or following the README instructions on GitHub. ClaudeWave also provides quick install blocks on this page.
Is agent-infra/sandbox safe to use?
Our security agent has analyzed agent-infra/sandbox and assigned a Trust Score of 97/100 (tier: Verified). See the full breakdown of passed checks and flags on this page.
Who maintains agent-infra/sandbox?
agent-infra/sandbox is maintained by agent-infra. The last recorded GitHub activity is dated 2026-09-14, with 73 open issues.
Are there alternatives to sandbox?
Yes. On ClaudeWave you can browse similar subagents at /categories/agents, sorted by popularity or recent activity.