Sandbox

Run the all-in-one sandbox container, exposing port 8080 for the REST API, documentation, VSCode, and browser VNC. The --security-opt flag is required for browser sandbox processes inside Docker.

docker run --security-opt seccomp=unconfined --rm -it -p 8080:8080 ghcr.io/agent-infra/sandbox:latest

Open the built-in API documentation in your browser to confirm the container is healthy and the API is accessible.

open http://localhost:8080/v1/docs

For Python-based agents, install the agent-sandbox SDK to interact with the sandbox programmatically.

pip install agent-sandbox

Connect the Python SDK to the running container and run a shell command, read a file, or capture a browser screenshot.

from agent_sandbox import Sandbox

client = Sandbox(base_url="http://localhost:8080")
result = client.shell.exec_command(command="ls -la /home/gem")
content = client.file.read_file(file="/home/gem/.bashrc")
screenshot = client.browser.screenshot()

Add the sandbox MCP server endpoint to your MCP client configuration. The sandbox exposes MCP-compatible tools for browser, shell, file, and document operations.

{
  "mcpServers": {
    "sandbox": {
      "url": "http://localhost:8080/mcp",
      "transportType": "streamable-http"
    }
  }
}

Pass environment variables to the Docker container to customize behaviour such as proxy settings, authentication, and the workspace directory.

docker run --security-opt seccomp=unconfined --rm -it -p 8080:8080 \
  -e PROXY_SERVER=host.docker.internal:7890 \
  -e WORKSPACE=/home/gem/project \
  -e TZ=America/New_York \
  ghcr.io/agent-infra/sandbox:latest