Sandbox SDK
SDK Reference

Compatibility

Compare declared capability modes across every supported provider.

The matrix is generated from the same capability declarations exported by the adapters. A dash means the normalized operation is unsupported; provider-native behavior may still exist on sandbox.raw.

CapabilityLocalE2BDaytonaVercel SandboxUpstash BoxAscii BoxRailway SandboxesTenki
files.readfullfullfullfullfullfullfullfull
files.writefullfullfullfullfullfullfullfull
files.listfullfullfullfullfullfullfullfull
files.removefullfullfullfullfullfullfullfull
process.runcombined-streamseparate-streamscombined-streamseparate-streamscombined-streamseparate-streamsseparate-streamsseparate-streams
process.streamcombined-streamseparate-streamsseparate-streamsseparate-streamscombined-stream—separate-streamsseparate-streams
process.backgroundfullfullfullfullfull—fullfull
process.stdinfullfullfull————full
process.cancelfullfullfullfull——fullfull
ports.exposein-processauthenticatedauthenticatedpublicauthenticatedpublic—public
ports.authenticatedRequest—authenticatedauthenticated—authenticatedauthenticated——
snapshot.createfilesystemtemplate—filesystemfilesystem—filesystemmemory
snapshot.deletefilesystemtemplate—filesystemfilesystem—filesystemmemory
snapshot.restorefilesystem———————
sandbox.resumememorymemory—persistentpersistentpersistent—memory
filesystem.persistentephemeralephemeralpersistentpersistentpersistentpersistentpersistentpersistent
image.custom—templatenative—native—templatetemplate
network.policynativenativenativenativenative—nativenative
process.pty—nativenativenative————
compute.gpu——native—————

Important differences

  • Local uses AgentOS as its in-process isolation boundary, with private bridged ports, deny-by-default networking and beta runtime status.
  • E2B and Daytona can issue authenticated preview URLs through preview.request().
  • Vercel and E2B snapshots create provider-native artifacts, but restore creates a new native sandbox and stays on raw.
  • Daytona persistence, PTYs, networking, images, and GPUs are provider-native capabilities beyond the normalized core.
  • Upstash Box provides durable filesystems, pause and resume, network policies, and public or bearer-token URLs; snapshot restore creates a new native Box.
  • Ascii Box provides persistent VMs and public HTTPS routes by default, but its command API is bounded to 60 seconds and has no background-process handle.
  • Railway provides streamed durable exec sessions and checkpoints; public port URLs and in-place checkpoint restore are not available through its TypeScript SDK.
  • Tenki provides stdin, streamed processes, public preview URLs, pause and resume, and disk-plus-memory snapshots; restoring a snapshot creates a new session.

Open a page in the provider catalog for setup and limitations.