A hands-on guide to running Claude Code in a locked-down sandbox — Docker isolation, filesystem and network restrictions, permission modes, and keeping your secrets out of reach. Real config you can copy.
Vercel Sandbox securely runs untrusted code in isolated cloud environments, like AI-generated code. Create ephemeral, isolated microVMs using the new Sandbox SDK, with up to 45m execution times. Now in Beta and available to customers on all plans.
Vercel Ship 2025 added new building blocks for an AI era: Fast, flexible, and secure by default. Lower costs with Fluid's Active CPU pricing, Rolling Releases for safer deployments, invisible CAPTCHA with BotID. See these and more in our recap.
You can now run commands with sudo inside Vercel Sandbox, giving you full control to install packages at runtime, just like on a traditional Linux system.
Pro and Enterprise teams can now run Vercel Sandboxes for up to 5 hours (up from 45 minutes). This extension unlocks new possibilities for workloads that require longer runtimes
You can now extend the duration of a running Vercel Sandbox using the new extendTimeout method. This lets you keep long-running sandboxes alive beyond their initial timeout. It is useful for workflows that take longer than expected
Vercel now has a native Python library hosted on PyPI to simplify tasks such as executing code on Vercel Sandboxes, transferring objects to Vercel Blob, working with the Runtime Cache and retrieving project tokens.
We spent months building a sophisticated text-to-sql agent, but as it turns out, sometimes simpler is better. Giving it the ability to execute arbitrary bash commands outperformed everything we built. We call this a file system agent.
We've open-sourced bash-tool, which gives your agent a way to find the right context by running bash-like commands over files, then returning only the results of those tool calls to the model.
SSH into running Sandboxes using the Vercel Sandbox CLI. Open secure, interactive shell sessions, with timeouts automatically extended in 5-minute increments for up to 5 hours.
Vercel Sandbox is now GA, providing isolated Linux VMs for safely executing untrusted code. Run AI agent output, user uploads, and third-party code without exposing production systems.
AI agents need secure, isolated environments that spin up instantly. Vercel Sandbox is now generally available with filesystem snapshots, container support, and production reliability.
