This directory contains examples of how to use the Agent Sandbox. Each subdirectory contains a different example.

• agent-sandbox-gymnasium: A Gymnasium environment backed by Agent Sandbox warm pools for RL agent training and evaluation.
• agent-sandbox-rl: Generic, multi-cluster batch orchestration for running SWE-bench-style RL/eval workloads on Agent Sandbox warm pools.
• agentclientprotocol: A simple Agent Client Protocol (ACP) client that drives an agent running inside a sandbox.
• aider-sandbox: An example of running the Aider coding agent in a sandbox using the template/claim pattern.
• aio-sandbox: An example of running All-in-One (AIO) Sandbox using agent-sandbox.
• analytics-tool: An example of running an analytics workload in a sandbox with a companion service.
• apf-insulation: An opt-in API Priority and Fairness overlay giving the controller dedicated apiserver concurrency for high-rate claim workloads (claim path > bulk refill > events).
• chrome-sandbox: An example of running a Chrome browser in a sandbox.
• code-interpreter-agent-on-adk: An example of using Agent Sandbox as a tool in Agent Development Kit (ADK).
• composing-sandbox-nw-policies: An example of composing network policies for sandboxes.
• containarium-execution-scoped-token: An example of execution-scoped credentials in a reused Sandbox: a run-bound token delivered only through sandboxd's ProcessConfig.env_vars, egress pinned to a credential proxy with Cilium, and the token revoked when the process exits.
• containarium-ssh-sandbox: An example of running Containarium's agent-box runtime in a Sandbox, reached over SSH with an in-container MCP server (no kube-apiserver token held by the agent).
• demo-cilium-egress: A demo of enforcing sandbox egress rules with Cilium network policies.
• envd-sandbox: An example of running E2B's envd daemon as the container entrypoint, providing an E2B-compatible REST and gRPC API for filesystem, process execution, and metrics.
• firecracker-sandbox: An example of running a sandbox on Kata Containers with the Firecracker VMM (kata-fc) plus an envd-compatible runtime that matches the E2B data-plane contract.
• gemini-cu-sandbox: An example of a Python runtime sandbox for Gemini Computer Use Agent.
• gke-swap: Demonstrates how to configure GKE node memory swap with dedicated Local SSDs to drastically increase Chrome pod density from 120 to 200 pods per node.
• hello-world-sandbox: A simple "Hello World" sandbox example.
• hermes-agent: An example of running Hermes Agent with persistence and custom skills.
• hermes-agents-as-a-service: The multi-user platform pattern distilled from a real agents-as-a-service product: per-user claims over a warm pool, suspend/resume as the cost dial, PVC state survival, and injection-policy enforcement.
• hpa-swp-scaling: An example of scaling a SandboxWarmPool using Kubernetes Horizontal Pod Autoscaler (HPA).
• irsa-simulation-localstack: Simulating IAM Roles for Service Accounts (IRSA) credential flows for sandboxes using LocalStack.
• jupyterlab: An example of running JupyterLab on Agent-Sandbox.
• kata-aks: Full end-to-end example — Python agent, Go client, and sandbox-router — on AKS with Kata Containers (Hyper-V) VM isolation and the warm-pool/claim pattern.
• kata-aks-sandbox: An example of running a sandbox with Kata Containers hardware-virtualized isolation on AKS, using the built-in Pod Sandboxing feature.
• kata-gke-sandbox: An example of running a sandbox with Kata Containers hardware-virtualized isolation on GKE.
• keda-scale-to-zero: An example of scaling a SandboxWarmPool down to zero (and back up) using KEDA and Google Managed Service for Prometheus (GMP).
• kueue-agent-sandbox: An example of admission-controlling sandbox workloads with Kueue.
• langchain: An example of a coding agent using Agent-Sandbox and LangGraph.
• latebind-storage-gke-sandbox: Late-binding persistent storage for sandboxes on GKE using the managed add-on APIs.
• manual-pdb: An example of manual PodDisruptionBudget (PDB) configuration for sandboxes.
• mcp-server-sandbox: Run an MCP (Model Context Protocol) server inside a Sandbox with attached storage.
• n8n-mcp: An example of connecting n8n workflows to sandboxes through the MCP server integration.
• network-policy-api-sandbox: Cluster-wide default deny and FQDN egress allowlists for sandboxes with the official Kubernetes ClusterNetworkPolicy API, on top of the template-managed NetworkPolicy, enforced by kube-network-policies (the SIG Network reference implementation).
• nono-sandbox: An example of running nono inside an Agent Sandbox, with fine-grained filesystem isolation, network filtering, credential brokering, and ephemeral per-tool micro-sandboxes.
• nullclaw-sandbox: An example of running Nullclaw, a minimal AI assistant runtime, inside the Agent Sandbox.
• openclaw-fleet-gke: A measured enterprise-fleet blueprint on GKE: sub-second warm claims with late-bound per-employee Filestore workspaces, stable per-employee URLs, two-tier sleep/wake, and rolling updates.
• openclaw-gvisor-sandbox: A production-shaped, gVisor-isolated OpenClaw sandbox using the template/claim pattern and persistent storage.
• openclaw-kata-aks-sandbox: An OpenClaw sandbox isolated by Kata Containers on AKS, so the agent runtime gets its own VM and guest kernel.
• pi-code-agent: An example of running the pi code agent inside a sandbox.
• playwright-sandbox: An example of running Playwright with Chromium in a sandbox for web scraping and screenshots.
• podsnapshot-golden-warmpool: Golden-snapshot warm pools on GKE — snapshot one primed sandbox (memory + filesystem) and every pool member pre-warmed afterward boots already restored from it, so claims adopt pre-initialized sandboxes.
• policy: Examples of using different policies with sandboxes.
• python-runtime-sandbox: An example of a Python runtime sandbox.
• python-sdk-quickstart: A quickstart for the Python SDK: create a sandbox, run commands, and manage files without Kubernetes primitives.
• quickstart: An end-to-end getting-started walkthrough — controller install, warm pool, router, and SDK test client — plus gVisor and Kata isolation variants.
• ray-integration: An example of integrating Ray with agent-sandbox for secure Proxy Execution during Agentic Reinforcement Learning (RL) training.
• sandbox-ksa: Examples of a sandbox with a service account, namespace, and a basic sandbox.
• sandboxd-sandbox: An example of running the sandboxd runtime daemon inside a sandbox for command execution and file I/O.
• sandboxed-tools: An example of an agent executing its tools inside a sandbox via the Go SDK.
• vscode-sandbox: An example of running VSCode in a sandbox.
• warmpool-quickstart: Reference YAML for the three extension CRDs — SandboxTemplate, SandboxWarmPool, and SandboxClaim — including a secure template and an LLM-scoped network policy example.
• webhook-inject-timestamp: A mutating webhook that stamps sandbox resources with a creation-observed timestamp for latency metrics.
• windows-sandbox: An example of running a Windows guest inside the Agent Sandbox via KVM/QEMU.