e2b

e2b-dev/E2B

Firecracker microVM sandboxes purpose-built for agent tool loops: ~150ms cold start, Python/JS SDKs, open source. The clearest reference implementation of "code execution as a harness primitive" rather than a CI system bolted on

Python Apache-2.0

View on GitHub → Find it in the atlas

Install

pip install e2b

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for e2b
The project's own screenshot, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsLikelyInferred from the language or runtime. Nothing in the project says so.
WSL2LikelyInferred from the language or runtime. Nothing in the project says so.
macOSLikelyInferred from the language or runtime. Nothing in the project says so.
LinuxLikelyInferred from the language or runtime. Nothing in the project says so.
DockerNoNo evidence of support anywhere in the project.

Where it came from

Named by 4 of the 39 lists the atlas merges, independently of each other.

How it is classified

One topic, 1 harness. Each link is a prerendered page of everything else in that slice.

Related in Sandbox, Security & Governance

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • Brood Boxstacklok/brood-boxRun AI coding agents (Claude Code, Codex, OpenCode) inside hardware-isolated microVMs with snapshot isolation, egress control, and MCP authorization
  • Guardrails AIguardrails-ai/guardrailsGuardrails is a Python framework for building reliable AI applications, offering Input/Output Guards to detect and mitigate risks, along with…
  • LLM Guardprotectai/llm-guardSecurity toolkit for LLM I/O validation. ~2K+ ⭐
  • Node9node9-ai/node9-proxySecurity and governance layer that checks every tool call from coding agents and MCP servers before it runs: credential jail, secret and PII…
  • OWASP Agent Memory GuardOWASP/www-project-agent-memory-guardOWASP reference implementation for ASI06 (Memory Poisoning): runtime defense that screens every agent memory read/write through detectors + a…
  • SkilLockskills-lock/skil-lockBehavior-pinning lockfile + capability-delta PR review for Claude Code & Codex skills; SARIF output for Code Scanning
  • Agent GuardJeongJaeSoon/agent-guardby JeongJaeSoon - Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI
  • agent-airlocksattyamjjain/agent-airlockDeny-by-default contract layer for agent tool calls that adds Pydantic strict validation, ghost-argument stripping and retryable fix hints through…