For AI apps & agents

A sandbox for the code your agent writes.

Give every run its own machine — single-tenant, isolated, gone when it’s done. Run model-generated code without it touching your app or another user.

Single-tenant isolation

Every run gets its own VM — its own kernel, its own memory. One agent’s code never touches another user’s environment.

Checkpoint and roll back

Save a clean baseline, run whatever the model generates, reset to clean for the next run.

Preview URLs

Anything your agent builds and serves gets a URL you can open straight from the browser.

Start from a template

Boot from base, python, dev, or one you publish — no cold-start setup on every run.

Persist or throw away

Hold a session open across turns, or let it tear down clean. Pay only while it runs.

Scoped MCP access

Connect agents directly via session-scoped MCP URLs — orchestration tokens and other sessions stay private.

Run your agent’s code somewhere safe.