Persistent & Secure
sandboxes for your agents.
Give your agents lightning-fast sandboxes with persistent state and versioned filesystems.
Your agents need their own computers.
Fast, elastic, stateful infrastructure built for AI workloads.
Agent harnesses
- Run the agent inside isolated, stateful sandboxes.
- Give the agent full access to files, packages, bash, working state.
- For research agents, personal agents, or long-running sessions.
// agent.ts — long-running harnessimport { Sandbox } from "@superserve/sdk"const sbx = await Sandbox.create({ name: "claude-sandbox" })await sbx.commands.run("npm i -g @anthropic-ai/claude-agent-sdk")await sbx.commands.run("claude -p 'refactor src/**/*.ts'")await sbx.pause() // resume later with the same stateIsolated code execution
- Execute AI-generated code, browsers, or system tasks in a sandbox.
- Keep the harness outside, spin up sandboxes for tool calls.
- For tool-calling agents that should not run untrusted code inside the harness itself.
// tool.ts — per-call sandbox for untrusted codeimport { Sandbox } from "@superserve/sdk"const sbx = await Sandbox.create({ name: "tool-call", timeoutSeconds: 300 })const out = await sbx.commands.run( `python -c ${JSON.stringify(toolCall.input.code)}`)console.log(out.stdout)Parallel agent swarms
- Fork a workspace, run parallel agents in isolated sandboxes, pick the best result.
- Snapshot the entire filesystem at any step, branch out to many environments, then resume from the exact state.
- For agent swarms that modify the same files, or agents that need human reviews on multiple paths.
// swarm.ts — fan out 8 agents from a shared templateimport { Sandbox } from "@superserve/sdk"const results = await Promise.all( Array.from({ length: 8 }, async (_, i) => { const sbx = await Sandbox.create({ name: `agent-${i}`, fromTemplate: "superserve/node-22", }) return sbx.commands.run("agent run") }))The fastest filesystem with built-in version control
vs. lost state at sandbox termination
vs. multiple seconds with S3
vs. git clone taking minutes
vs. file locks on other durable filesystems
Security built for AI workloads
Firecracker isolation
Every agent and tool call runs in its own microVM. No shared kernels or cross-tenant states. Stronger isolation than docker containers and local worktrees.
Credentials broker
Agents should not possess credentials. Our broker sits between your agent and the APIs it calls, eliminating credential exfiltration risk with brokered access.
Open source transparency
Verify every line of code. No black boxes. No hidden logic.
Network Controls
Control egress traffic to specified URLs and IPs.
Programmatic control built for agents
Process execution
Execute code and commands in isolated environments with real-time output streaming.
File system operations
Manage file CRUD operations and checkpoint/rollback state programmatically.
Elastic resource allocation
Let your agents request CPU/memory resources on the fly from within the box.
Start for free, pay as you scale.
No credit card to start. Per-second billing.
Your first sandbox
in seconds.
npm install @superserve/sdk