Sandbox SDK
SDK Reference

Compatibility

Compare declared capability modes across every supported provider.

The matrix is generated from the same capability declarations exported by the adapters. A dash means the normalized operation is unsupported; provider-native behavior may still exist on sandbox.raw.

CapabilityLocalE2BDaytonaVercel SandboxUpstash BoxAscii BoxRailway Sandboxes
files.readfullfullfullfullfullfullfull
files.writefullfullfullfullfullfullfull
files.listfullfullfullfullfullfullfull
files.removefullfullfullfullfullfullfull
process.runcombined-streamseparate-streamscombined-streamseparate-streamscombined-streamseparate-streamsseparate-streams
process.streamcombined-streamseparate-streamsseparate-streamsseparate-streamscombined-streamseparate-streams
process.backgroundfullfullfullfullfullfull
process.stdinfullfullfull
process.cancelfullfullfullfullfull
ports.exposein-processauthenticatedauthenticatedpublicauthenticatedpublic
ports.authenticatedRequestauthenticatedauthenticatedauthenticatedauthenticated
snapshot.createfilesystemtemplatefilesystemfilesystemfilesystem
snapshot.deletefilesystemtemplatefilesystemfilesystemfilesystem
snapshot.restorefilesystem
sandbox.resumememorymemorypersistentpersistentpersistent
filesystem.persistentephemeralephemeralpersistentpersistentpersistentpersistentpersistent
image.customtemplatenativenativetemplate
network.policynativenativenativenativenativenative
process.ptynativenativenative
compute.gpunative

Important differences

  • Local uses AgentOS as its in-process isolation boundary, with private bridged ports, deny-by-default networking and beta runtime status.
  • E2B and Daytona can issue authenticated preview URLs through preview.request().
  • Vercel and E2B snapshots create provider-native artifacts, but restore creates a new native sandbox and stays on raw.
  • Daytona persistence, PTYs, networking, images, and GPUs are provider-native capabilities beyond the normalized core.
  • Upstash Box provides durable filesystems, pause and resume, network policies, and public or bearer-token URLs; snapshot restore creates a new native Box.
  • Ascii Box provides persistent VMs and public HTTPS routes by default, but its command API is bounded to 60 seconds and has no background-process handle.
  • Railway provides streamed durable exec sessions and checkpoints; public port URLs and in-place checkpoint restore are not available through its TypeScript SDK.

Open a page in the provider catalog for setup and limitations.