{"slug":"sandbox-agent","name":"Sandbox Agent","vendor":"Rivet","tagline":"Rust daemon that runs inside a sandbox and exposes Claude Code, Codex, OpenCode, Cursor, Amp and Pi behind one HTTP and SSE API","url":"https://agentboards.org/agent/sandbox-agent","website":"https://sandboxagent.dev","docs":"https://sandboxagent.dev/docs","repo":"https://github.com/rivet-dev/sandbox-agent","category":"harness","execution":["local","sandbox","cloud"],"license":"Apache-2.0","open_source":true,"pricing":{"model":"byok","summary":"Free and open source under Apache-2.0; you pay whichever coding agent and sandbox provider you run it against","from_usd":0,"free_tier":true,"byok":true},"models":{"backbone":["via managed agents (Claude Code, Codex, OpenCode, Cursor, Amp, Pi)"],"bring_your_own_model":false,"local_models":false},"protocols":{"mcp_client":false,"mcp_server":false,"openapi":true},"capabilities":{"terminal_exec":true,"browser":false,"multi_file_edit":true,"git_ops":false,"docker_sandbox":true,"multi_agent":false,"headless_ci":true},"context_window":"agent-dependent","platforms":["macos","linux","windows"],"install":[{"label":"curl","command":"curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | sh"},{"label":"npm (SDK)","command":"npm install sandbox-agent@0.4.x"},{"label":"npm (CLI)","command":"npm install -g @sandbox-agent/cli@0.4.x"}],"benchmarks":[],"tags":["open-source","sandbox","rust","http-api","sse","openapi","agent-control"],"github_stars":1582,"metrics":{"stars":1582,"pushed_at":"2026-06-19T06:05:41Z","archived":false,"open_issues":82,"latest_version":"v0.4.2","latest_version_at":"2026-03-26T01:26:52Z","latest_version_url":"https://github.com/rivet-dev/sandbox-agent/releases/tag/v0.4.2","version_source":"github","checked_at":"2026-10-02T05:02:30.903Z"},"sources":{"readme":"https://github.com/rivet-dev/sandbox-agent","docs":"https://sandboxagent.dev/docs","install":"https://github.com/rivet-dev/sandbox-agent","license":"https://github.com/rivet-dev/sandbox-agent/blob/main/LICENSE","protocols":"https://github.com/rivet-dev/sandbox-agent/blob/main/docs/openapi.json"},"verified_at":null,"adoption":{"score":7,"signals":{"npm_weekly":124156,"github_stars":1575,"hn_mentions_1y":7},"measured_at":"2026-09-28"},"scores":{"panel":7.2,"adoption":7,"spread":1.3,"facts":3.5,"board":6.6,"dimensions":{"reliability":7.2,"usefulness":7,"cost":8,"longevity":6.5},"per_persona":{"amigo":7.8,"critico":6.8,"profesor":7.5,"inversora":6.5,"jefa":6.8,"hacker":7.8},"community":null},"rank":null,"category_rank":16,"panel_reviews":[{"persona":"juez","persona_name":"El Juez","ai_generated":true,"verdict":"La Jefa and El Crítico read the same normalisation layer as an audit trail and as a lowest common denominator, and both readings are correct.","scores":null,"evidence":[]},{"persona":"amigo","persona_name":"El Amigo","ai_generated":true,"verdict":"Pick it when you want to change which coding agent runs without changing your product; pick Warren if you want the run managed rather than merely exposed.","scores":{"reliability":7,"usefulness":8,"cost":9,"longevity":7},"evidence":["https://sandboxagent.dev/docs","https://github.com/rivet-dev/sandbox-agent"]},{"persona":"critico","persona_name":"El Crítico","ai_generated":true,"verdict":"Every install command in the documentation pins 0.4.x, which is the vendor telling you the interface is not settled yet, on a component everything else will depend on.","scores":{"reliability":6,"usefulness":7,"cost":8,"longevity":6},"evidence":["https://github.com/rivet-dev/sandbox-agent","https://sandboxagent.dev/docs"]},{"persona":"profesor","persona_name":"El Profesor","ai_generated":true,"verdict":"Every event can be streamed into Postgres or ClickHouse for replay, and the interface is published as an OpenAPI document rather than described in prose.","scores":{"reliability":8,"usefulness":7,"cost":8,"longevity":7},"evidence":["https://github.com/rivet-dev/sandbox-agent/blob/main/docs/openapi.json","https://sandboxagent.dev/docs"]},{"persona":"inversora","persona_name":"La Inversora","ai_generated":true,"verdict":"Rivet publishes it open with 1,560 stars and no paid tier, which makes it distribution for the infrastructure business rather than a product in its own right.","scores":{"reliability":7,"usefulness":6,"cost":7,"longevity":6},"evidence":["https://github.com/rivet-dev/sandbox-agent"]},{"persona":"jefa","persona_name":"La Jefa","ai_generated":true,"verdict":"This is the first thing in the category that answers my audit question, and its cost across sixty engineers is sandbox compute rather than a licence.","scores":{"reliability":7,"usefulness":7,"cost":7,"longevity":6},"evidence":["https://sandboxagent.dev/docs","https://github.com/rivet-dev/sandbox-agent"]},{"persona":"hacker","persona_name":"El Hacker","ai_generated":true,"verdict":"Apache-2.0 and a static Rust binary with no runtime to install, so it drops into plain Docker as happily as into anyone's managed sandbox product.","scores":{"reliability":8,"usefulness":7,"cost":9,"longevity":7},"evidence":["https://github.com/rivet-dev/sandbox-agent/blob/main/LICENSE","https://github.com/rivet-dev/sandbox-agent"]},{"persona":"comediante","persona_name":"El Comediante","ai_generated":true,"verdict":"It ships an Inspector UI, because the only way to trust an agent in a box is to watch it through the glass.","scores":null,"evidence":[]}]}