Deno Sandbox

Introducing celld: self-hosted, distributed Durable Objects

The safest, simplest way to run untrusted code

Built for AI agents; made for you

— Getting started —

Create your first Deno Sandbox in under two minutes

1. Install `@deno/sandbox`

Deno Sandbox works with Node or Deno, using any package manager you like. (We even have a Python SDK.)

Available for:

npm
npm
JSR
JSR
Python
PyPI

2. Create an access token

Easily create an access token in the Deno Deploy dashboard, and use it to authenticate your API requests.

3. Create your first sandbox!

Use the Sandbox API to execute any code you like. Call to LLMs, or any other API endpoints you need. Read and write files. Enjoy the full power of JavaScript.

import { Sandbox } from "@deno/sandbox";
await using sandbox = await Sandbox.create();
await sandbox.sh`ls -lh /`;

Show output

$ deno -NE ls.ts
total 9.3M
drwxr-xr-x   1 daemon daemon 4.0K Nov  3 10:52 app
lrwxrwxrwx   1 root   root      7 Nov  3 10:15 bin -> usr/bin
drwxrwxrwt  10 root   root    200 Nov  3 10:52 data
drwxr-xr-x   4 root   root   2.3K Nov  3 10:52 dev
drwxr-xr-x   1 root   root    100 Nov  3 10:15 etc
-rwxr-xr-x   1 root   root   9.2M Nov  3 10:17 fcinit
drwxr-xr-x   3 root   root     45 Nov  3 10:15 home
drwxrwxrwt   2 daemon daemon   40 Nov  3 10:40 isolate
lrwxrwxrwx   1 root   root      7 Nov  3 10:15 lib -> usr/lib
lrwxrwxrwx   1 root   root      9 Nov  3 10:15 lib64 -> usr/lib64
drwx------   2 daemon daemon    3 Nov  2 23:48 mnt
drwxr-xr-x   2 root   root     27 Nov  3 10:15 overlay
dr-xr-xr-x 115 root   root      0 Nov  3 10:40 proc
drwxr-xr-x  18 root   root    384 Nov  3 10:17 rom
drwxr-xr-x   2 root   root   4.0K Nov  3 10:40 root
drwxrwxrwt   6 root   root    120 Nov  3 10:40 run
lrwxrwxrwx   1 root   root      8 Nov  3 10:15 sbin -> usr/sbin
dr-xr-xr-x  12 root   root      0 Nov  3 10:40 sys
drwxrwxrwt   9 root   root   4.0K Nov  3 10:52 tmp
drwxr-xr-x  12 root   root    194 Sep  8 00:00 usr
drwxr-xr-x   5 root   root   4.0K Nov  3 10:40 var

What is Deno Sandbox?

Deno Sandbox is an SDK for instantly creating and managing secure, isolated VMs in the cloud on Deno Deploy.

Every Sandbox is an independent Linux microVM.

This means each Sandbox has its own strict permissions, network policies, directories, and isolated secrets—making Deno Sandbox perfect for AI agents, or any other dynamic workload where speed and security are paramount.

— Use cases —

Why Deno Sandbox?

Deno Sandbox lets you run untrusted or generated code with real isolation and complete control.

Instant startup
Strict network policies
Secure isolated secrets
Persistent file system

Instantly isolate untrusted code

Specify who your Sandbox is allowed to talk to, and bind secrets so they're only revealed to approved destinations on the wire.

import { Sandbox } from "@deno/sandbox";

await using sandbox = await Sandbox.create({
  root: "claude",
  secrets: {
    ANTHROPIC_API_KEY: {
      hosts: ["api.anthropic.com"],
      value: process.env.ANTHROPIC_API_KEY!,
    }
  }
});

await sandbox.sh`claude -p hello`;

Define what code can reach

Sandboxes let you lock down outbound connections, so code can't leak data or phone home, even if it tries to.

import { Sandbox } from "@deno/sandbox";

await using sandbox = await Sandbox.create({
  allowNet: ["example.com"]
});

await sandbox.sh`curl -is https://deno.com/`;
// ❌ BLOCKED

Wildly fast start times

Fast to get started and fast to run, Deno Sandbox is built for performance. New sandboxes spin up in milliseconds—almost faster than you can even think about it.

await Sandbox.create();

Ready in 93ms ✅

Build your way

The Deno Sandbox SDK currently supports JavaScript, TypeScript, and Python, with more languages coming soon.

Run your dev server

Test live in the browser

Expose your dev server over HTTP for live previews in any browser.

sandbox.exposeHttp(8000);

Connect via SSH

Connect to your sandbox via SSH with a single command.

sandbox.exposeSsh();

On-demand editing

Instantly access a disposable editor for demos or remote debugging

sandbox.exposeVscode();

Every sandbox helps you get started. Deno Sandbox helps you get finished.

Since you’re building on Deno Deploy, you can take your sandbox live instantly, the moment you’re ready.

sandbox.deploy();

— Pricing —

Priced for builders

Usage-based pricing to maximize your capabilities, while keeping costs predictable and competitive.

Deno Sandbox pricing

CPU TIME $0.10/CPU-hr

Memory $0.025/GiB-hr

Volume usage $0.20/GiB-month

— FAQs —

Frequently Asked Questions

What is Deno Sandbox?

Each Deno Sandbox is a lightweight Linux microVM running on Deno Deploy, that you control via a simple API.

Each sandbox is fully isolated, with its own filesystem, network stack, and process tree. You can control sandboxes programmatically using the Deno Sandbox SDK.

How fast do Sandboxes start?

Under 200ms. Fast enough to spin up on-demand for each request.

What can I run in a Sandbox?

Any Linux binary. Deno is pre-installed, so TypeScript and JavaScript run out of the box with no setup.

What are the resource limits?

Default is 2 vCPUs, 1.2 GiB memory, and 10GiB disk. You can adjust these when creating a sandbox.

What do Sandboxes cost?

See the section above this one; here's a direct link to the pricing details.

Can I set usage limits?

Yes; Deno Deploy allows you to set spend limits to avoid unforeseen costs on all paid plans. (Free plans are simply cut off once they reach their usage limits.)

What isolation do Sandboxes provide?

Each sandbox runs in its own Firecracker microVM—the same technology that powers AWS Lambda. See our security documentation for details on outbound network filtering and secret management.

How do you prevent data exfiltration?

All outbound connections route through a proxy where your security policy is enforced. You control exactly which hosts your code can reach.

Can untrusted code access my secrets?

No. Secrets in your sandbox are replaced with secure placeholder tokens. The real values are only injected at the network layer, when connecting to approved destinations—so even malicious code can't read or leak them.

What compliance certifications do you have?

Deno Deploy is SOC2 and ISO27001 certified. Your code and sandbox data are never shared with third parties. We can also provide HIPAA BAA for enterprise contracts.

Where do Sandboxes run?

Currently, you can choose between the U.S. and Europe when spinning up a sandbox. We plan to offer a region in Asia as well in the near future.

— Get started now —

Ready to get started with Deno Sandbox?

Get started with the SDK of your choice, and be up and running in less than two minutes.

Deno Sandbox docs

Introducing celld: self-hosted, distributed Durable Objects

The safest, simplest way to run untrusted code

— Getting started —

Create your first Deno Sandbox in under two minutes

1. Install @deno/sandbox

2. Create an access token

3. Create your first sandbox!

— Use cases —

Why Deno Sandbox?

Instantly isolate untrusted code

Define what code can reach

Wildly fast start times

Build your way

Run your dev server

Test live in the browser

Connect via SSH

On-demand editing

Every sandbox helps you get started. Deno Sandbox helps you get finished.

— Pricing —

Priced for builders

Deno Sandbox pricing

— FAQs —

Frequently Asked Questions

What is Deno Sandbox?

How fast do Sandboxes start?

What can I run in a Sandbox?

What are the resource limits?

What do Sandboxes cost?

Can I set usage limits?

What isolation do Sandboxes provide?

How do you prevent data exfiltration?

Can untrusted code access my secrets?

What compliance certifications do you have?

Where do Sandboxes run?

— Get started now —

Ready to get started with Deno Sandbox?

1. Install `@deno/sandbox`