CLI-first sandbox workflow
Start a new Linux sandbox from the CLI with a single command. The site lists box new for spin-up, along with box ssh, box scp, box prompt, box fork, box stop, box desktop, and box list for common workflows.
Box
Box is a cloud sandbox service for agents and developers who need persistent Linux VMs with SSH, Docker, snapshots, and per-machine IPv4. It is designed for CLI and API-driven workflows and supports agents such as Claude Code, Codex, and OpenCode.
Overview
Box is a cloud sandbox service for agents, automation, testing, and development. It provides persistent Linux VMs that you can reach over SSH, run Docker inside, fork from snapshots, and use with a 60fps desktop when needed.
The product is aimed at long-running agent workflows and other compute that needs its own machine state. The site says it is designed for agent factories, supports tools such as Claude Code, Codex, and OpenCode, and bills by VM time rather than by a bundled app seat.
Core features
Persistent Linux VMs
Each box is a persistent Ubuntu VM with SSH and SCP access, Docker support inside the VM, and a dedicated IPv4 address per machine.
Snapshot and fork
The product includes fast disk-level forking from a snapshot, so you can clone an existing environment and branch work without rebuilding everything from scratch.
Preconfigured tooling
Boxes ship with Docker, VS Code, Chrome, Ghostty, GitHub CLI, Rust, Node.js, and Bun pre-installed, which reduces setup work before an agent or developer starts running tasks.
Desktop and hosted access
A 60fps virtual desktop is included for GUI use, and the service also supports public service URLs as part of the hosted environment described in the terms.
API and SDK support
For programmatic workflows, the site points to an HTTP API and SDKs, and says the CLI can emit JSON output with --json for stable automation.
Common use cases
Agent factories
Run multiple isolated agents in parallel, each on its own VM, when you need separate state, networking, and filesystem context.
24/7 services
Keep background services alive on a machine that has its own IPv4 address, full TCP/UDP support, and Docker inside the VM.
Personal remote dev box
Use the persistent VM as a personal development box that survives reboots, supports SSH from anywhere, and offers a GUI when needed.
Branching from snapshots
Fork from a snapshot to branch work, reproduce a known environment, or create a new machine from an existing state quickly.
Public demos and hosted apps
Expose a service through the hosted environment and manage it as a public workload, with responsibility for the content and access remaining on the user.
Pros and Cons
Pros
- Persistent Linux VMs with SSH, SCP, Docker, snapshots, and per-machine IPv4.
- Billing is by the second with a $20 monthly minimum that buys 2,000,000 VM-seconds of 4 vCPU / 8 GB time.
- Preinstalled dev tools such as Docker, GitHub CLI, Rust, Node.js, Bun, VS Code, Chrome, and Ghostty reduce setup time.
- Works with multiple agents, including Claude Code, Codex, and OpenCode.
- Supports both CLI and programmatic use through an HTTP API and SDKs.
Cons
- The public pricing page currently returns a 404, so plan details have to be inferred from other pages.
- The service is currently limited to EU regions: Germany, Finland, and France.
- Default box TTL is 1 hour, although it can be overridden.
FAQ
Am I billed when a box is stopped?
Boxes are billed by the second. Stopping a box snapshots it and pauses billing, and you can resume it later.
Is the $20 minimum per box?
No. The $20 minimum is an account-level amount, not a per-box minimum, and it converts into 2,000,000 VM-seconds of machine time.
Where do boxes run?
Boxes currently run in EU regions: Germany, Finland, and France. The terms also say data and snapshots stay there.
What survives stop and resume?
Files, installed packages, and enabled systemd services survive stop and resume. Hand-run processes need to be restarted.
Can I give boxes to my own users?
Yes. You can create boxes no-env so they receive none of your account secrets and stay confined to themselves.
Quick Facts
- Category
- Developer Tool
- Product type
- Cloud sandbox / persistent Linux VM
- Primary workflow
- CLI-first with API and SDK options
- Supported agents
- Claude Code, Codex, OpenCode
- Regions
- Germany, Finland, France (EU only)
- Billing
- Per second; $20 monthly minimum
Alternativas a Box
ByteAsk
ByteAsk is a terminal-first AI coding agent for C and C++ that edits repositories and verifies changes with the real compiler, debugger, sanitizers, and tests before showing a diff. It offers a free tier plus paid plans, with editor connectors and zero-retention handling described in the source.
Manta AI
Manta AI is an autonomous web app testing tool for teams that want to map application behavior, catch regressions, and generate tests without writing scripts or maintaining selectors. It works from a URL and supports plain-English test flows, run results with screenshots, and scheduled or deployment-triggered checks.
CreateOS Sandbox
CreateOS Sandbox is an isolated compute environment for running code and agent workloads inside Firecracker micro-VMs. It is designed for workflows that need machine-level isolation, private networking between sandboxes, and programmatic control through SDK, CLI, or MCP.
hob
hob is an independent workspace for coding agents that keeps agent sessions, terminals, history, and follow-up work organized around the tools and providers you already use. It is aimed at developers who want local control over routing, history, and workspace structure rather than a bundled model stack.
SonOf
SonOf connects to your repo and PM tool, audits the codebase and surrounding product context, and turns approved work into shipped tickets with senior engineering review. It is aimed at founders and engineering leaders who need backlog help without hiring a full team immediately.
Ghost
Ghost es un asistente de IA para terminal para chatear, generar código y ejecutar tareas en la línea de comandos. Incluye modelos gratuitos, es compatible con Linux, macOS y Windows, y es de código abierto.