⚡ easy, fast, and programmable microVM. ship with your app, self-host, BYOC, or run on our cloud. ideal for AI agents, dev containers, CI/CD, and more · YC F26
toronto
Joined April 2025
- Tweets134
- Following8
- Followers841
- Likes182
you can now return custom HTTP denial messages to your agent or harness when a network or secret policy blocks a request in a microsandbox. 🛡️
tell it what to do next, or disable responses to close the connection without an explanation.
ALT typescript example configuring custom HTTP denial messages in microsandbox for blocked network access and secret use. below, a 403 forbidden json response contains the code “secret_policy_denied,” the message “review secret access.” and the domain “example.com.”
microsandbox retweeted
🏖️ How to run your own local sandboxes (give this to your agent):
A spare Linux box can run your coding agent's sandboxes with each one getting its own microVM and private env vars
Mine's running on a Framework, completely replaced Vercel Sandbox for my demos
- @microsandbox runs each sandbox as a VM with its own kernel instead of a container
- the VM gets a placeholder key; the proxy swaps in the real one only on calls to that host and keys expire with the sandbox
- a firewall keeps it off the host's own services, my home network and tailnet; only the public internet
- each one gets 2 CPUs and 4 GB, up to 10 run at once and stops after idle for 30 minutes
prompt in reply
one line install:
curl -fsSL install.microsandbox.dev | sh
walk through it yourself in a minute:
github.com/superradcompany/m…
what should we explain next?
the --secret flag:
msb create python --secret [email protected]
GITHUB_TOKEN → read from your env, never stored
api.github.com → the only host that gets the real key
send the placeholder anywhere else and the request is blocked.
any API key your agent can read is one prompt injection away from leaking.
in microsandbox, the key never enters the guest. instead the agent gets a placeholder, and the real key gets swapped in on the way out.
here's what that looks like ↓
12 people helped ship these releases, including 5 first-time contributors. thank you for building microsandbox with us 💜
full release notes:
docs.microsandbox.dev/change…
docs.microsandbox.dev/change…
where did the disk space go?
msb df shows local storage usage. msb prune --dry-run previews unused runtime memory files you can remove, without touching saved snapshots or disks.
your sandbox can now connect to the internet through an HTTP CONNECT proxy. this is in addition to SOCK4 and SOCKS5 proxies we already support.
set it up once on the sandbox. your apps don’t need any changes.
your app sends a placeholder. microsandbox replaces it with the real secret before forwarding the request.
now you choose which headers get that replacement. other headers keep the placeholder.
start a long-running command, close the client, and come back to its logs from another terminal.
background jobs keep running while their sandbox runs. stopping the sandbox still stops the job.
here’s what that looks like ↓
microsandbox v0.7.7 + v0.7.8 are out!
⚙️ run commands in the background (jobs)
🔑 choose which headers receive secrets
🌐 use HTTP CONNECT proxies
🧹 inspect and clean up local storage
plus control over clock syncing when restoring snapshots, and more. 🧵
microsandbox retweeted
.@microsandbox now 5th on DAX bench.
we've been investing a lot into performance of our runtime over the past couple months, and it shows. some of those changes got rolled out to the cloud only recently (still private beta).
trailing on TTI bench, with lots of improvements in our backlog. expect to see more of those wins as we roll out more exciting features and improvements.
walk through it yourself in a minute:
github.com/superradcompany/m…
that's episode 1 of msb in 90s.
what should we explain next?
msb pause freezes a whole microsandbox in ~10 ms: every process, its memory, its progress.
paused, a sandbox that was maxing out a core drops to >1%.
msb resume brings it back in ~10-25 ms and the job carries on from the exact step it stopped at.
introducing msb in 90s, a new series.
episode 1: pause and resume
pause a running computer.
resume it right where it left off.
microsandbox retweeted
if you want this too but don't have lovable-level time and money, @microsandbox is the open-source alternative that gives you this and more.
O_DIRECT is shipped for disk and memory is next.
so you can:
- set up an environment once, reuse it already warm
- branch one moment and try different approaches
- snapshot before a risky change, come back anytime
available now in v0.7.4 (arm64 and x86-64). cloud support coming soon.
docs.microsandbox.dev/sandbo…
