# E2B > The AI Agent Cloud. Open-source sandbox platform that gives AI agents isolated machines. Append `.md` to any page, blog post, or case study URL for its Markdown representation. Use `/index.md` for the homepage. > **If you are an AI agent**, read [SKILL.md](https://e2b.dev/SKILL.md) for step-by-step instructions on setting up and using E2B in your workflow. ## When to use E2B Use E2B when an AI agent needs an isolated Linux computer to execute generated code, run shell commands, work with files, install packages, access the internet, or operate a desktop. Use sandboxes for coding agents, data analysis, deep research, computer use, reinforcement learning, and other workloads that should not run on the host application. E2B provides compute for agents. Bring your own model and orchestration framework. ## Start building - Install the SDK: `pip install e2b` for Python or `npm install e2b` for JavaScript and TypeScript. - Get an API key (starts with `e2b_`): https://console.e2b.dev/?tab=keys - Create a sandbox with `Sandbox.create()`. Connect to an existing sandbox with `Sandbox.connect(id)`. - Install the CLI with `npm install -g @e2b/cli` or `brew install e2b`. ## Developer interfaces - [Documentation](https://docs.e2b.dev): Quickstarts, SDK reference, CLI reference, authentication, and API documentation. - [Machine-readable documentation index](https://docs.e2b.dev/llms.txt): Complete documentation inventory for agents. - [OpenAPI specification](https://docs.e2b.dev/openapi-public.yaml): OpenAPI 3.1 description of the E2B REST API. - [REST API](https://api.e2b.app): API origin. Authenticate requests as described in the OpenAPI specification. - [CLI documentation](https://docs.e2b.dev/cli): Install, authenticate, and manage sandboxes and templates. - [Docs MCP server](https://docs.e2b.dev/mcp): Public, no auth; tools `search_e2_b_docs` and `query_docs_filesystem_e2_b_docs`. - [MCP gateway documentation](https://docs.e2b.dev/mcp-gateway): Connect MCP servers to E2B sandboxes. --- Source: https://e2b.dev/index.md # E2B — The AI Agent Cloud > E2B is the AI agent cloud. It gives each agent session an isolated Linux machine that boots from a snapshot and works with any model or agent framework. ## What E2B provides An E2B Sandbox is a full Linux microVM with its own kernel. Applications create and control sandboxes through the Python or JavaScript SDK, while the agent uses the machine's shell, filesystem, network, and optional desktop. - **Execution:** Run commands, stream output, attach a PTY, or execute Python and JavaScript with rich results such as charts, tables, and images. - **Lifecycle and state:** Pause and resume a sandbox with a full snapshot (filesystem and memory) or a filesystem-only snapshot, and fork up to 100 copies from a saved state. - **Network and identity:** Expose sandbox ports through HTTPS, control egress by CIDR or hostname, and keep secrets in a vault that injects them at the egress proxy, so the value never enters the sandbox. - **Storage:** Use an isolated POSIX filesystem, Git, persistent volumes, or mounted S3, GCS, and R2 buckets. - **Observability:** Read live CPU, memory, and disk metrics; collect logs; use a browser terminal; and receive signed lifecycle webhooks. ## Common use cases - Coding agents that edit repositories, run tests, and build applications. - Code interpreters for data analysis, visualization, and generated code. - Computer-use and browser agents that need a graphical Linux desktop. - Deep-research and knowledge-work agents that use files, tools, and the internet. - Parallel environments for reinforcement learning, evaluations, and benchmarks. ## Deployment and security Every session receives a hardware-isolated Firecracker microVM rather than a shared-kernel container. E2B Cloud is managed across US, EU, and APAC regions. Enterprise teams can run the data plane in their own AWS or GCP account through BYOC. A private cloud deployment with the control plane inside the customer boundary is in development. [E2B Embed](https://github.com/e2b-dev/runtime/tree/main/embed#readme) is available as an Apache-2.0 single-node package, with Docker Compose, Terraform on GCP, and Kubernetes installs. It runs the control plane, Firecracker sandboxes, and storage on a single Linux x86-64 machine with KVM, self-hosted, embedded inside a product, or deployed into a customer's tenancy. E2B Cloud is SOC 2 Type II compliant. ## Product model Bring your own model, prompts, agent harness, and orchestration framework. E2B supplies the machine where the agent acts. It works with providers and frameworks including Anthropic, OpenAI, open-weight models, OpenAI Agents SDK, and LangChain. ## Start building - [Quickstart](https://docs.e2b.dev/quickstart): Create your first sandbox with the Python or JavaScript SDK. - [E2B Console](https://console.e2b.dev): Create an account and API key. - [Documentation](https://docs.e2b.dev): SDK, CLI, sandbox, template, desktop, and API references. - [Cookbook](https://e2b.dev/cookbook.md): Ready-to-run examples for common models and frameworks. - [Pricing](https://e2b.dev/pricing.md): Plans, usage rates, concurrency, and the cost estimator. - [Enterprise](https://e2b.dev/enterprise.md): BYOC, security, scale, and deployment options. - [Open source](https://e2b.dev/open-source.md): Runtime, SDK, CLI, and example repositories. ## Machine-readable resources - [Agent skill](https://e2b.dev/SKILL.md): Step-by-step setup and usage instructions for AI agents. - [Website index](https://e2b.dev/llms.txt) - [Full website index](https://e2b.dev/llms-full.txt) - [Content sitemap](https://e2b.dev/sitemap.md) - [Documentation index](https://docs.e2b.dev/llms.txt) - [OpenAPI specification](https://docs.e2b.dev/openapi-public.yaml) --- Source: https://e2b.dev/pricing.md # E2B Pricing > E2B combines a plan with usage-based sandbox charges. Running sandboxes are billed per second for provisioned CPU and RAM. Sandbox storage is included with every plan at no extra cost. ## Plans ### Hobby - $0 monthly plan fee. - One-time $100 in usage credits. - Up to 20 concurrently running sandboxes. - Up to 1 hour per sandbox session. - 10 GiB of sandbox storage, included. - Community support. - No credit card required to start. ### Pro - $150 monthly plan fee, plus usage. - Up to 100 concurrently running sandboxes. - Up to 24 hours per sandbox session. - 20 GiB of sandbox storage, included. - Custom sandbox CPU and RAM. - Optional concurrency add-ons increase the limit to 600 or 1,100 sandboxes. ### Enterprise - Custom deployment, pricing, billing, support, and limits. - A $3,000 monthly minimum applies to Enterprise usage. - Contact E2B for workloads that need more powerful compute, higher concurrency, BYOC, or negotiated terms. ## Published usage rates | Resource | Rate | | --- | ---: | | vCPU | $0.000014 per vCPU-second | | RAM | $0.0000045 per GiB-second | | Storage | Free | Sandboxes can be configured with 1 to 8 vCPUs and 1 to 8 GiB of RAM. The default sandbox has 2 vCPUs and 4 GiB of RAM. Total usage depends on the selected resources and aggregate runtime across all sandboxes. Sandboxes are CPU-only; E2B does not offer GPU sandboxes. ## Concurrency add-ons | Plan | Maximum concurrent sandboxes | Monthly plan and add-on fee | | --- | ---: | ---: | | Hobby | 20 | $0 | | Pro | 100 | $150 | | Pro+ | 600 | $650 | | Pro++ | 1,100 | $1,150 | Usage charges are separate from these monthly fees. ## Next steps - [Use the interactive cost estimator](https://e2b.dev/pricing#usage-cost-calculator). - [Start in the E2B Console](https://console.e2b.dev). - [Read the quickstart](https://docs.e2b.dev/quickstart). - [Contact E2B for Enterprise pricing](https://e2b.dev/contact.md). --- Source: https://e2b.dev/resources.md # E2B Resources > Practical material for building, running, and scaling AI agents with secure cloud sandboxes. ## What you will find - **Guides:** Step-by-step implementation guidance for code interpreters, coding agents, desktop agents, and framework integrations. - **Tutorials:** Code-first walkthroughs that start from a blank project and produce a working agent. - **Engineering:** Technical explanations of sandbox isolation, Firecracker, build systems, reliability, and infrastructure choices. - **Product:** SDK releases, platform capabilities, integrations, partnerships, and security updates. - **Case studies:** How teams use E2B in production for consumer agents, enterprise automation, research, and evaluations. ## Browse by intent - [Guides](https://e2b.dev/resources/guides.md) - [Product updates](https://e2b.dev/resources/product.md) - [Community](https://e2b.dev/resources/community.md) - [Interviews](https://e2b.dev/resources/interviews.md) - [Company and platform updates](https://e2b.dev/resources/updates.md) - [Engineering and ecosystem insights](https://e2b.dev/resources/insights.md) - [Customer case studies](https://e2b.dev/customers.md) - [Ready-to-run examples](https://e2b.dev/cookbook.md) ## For agents Individual resource URLs also have Markdown representations. Append `.md` to an article URL, or use the [content sitemap](https://e2b.dev/sitemap.md) to discover every published article and case study. For product implementation details, prefer the [E2B documentation](https://docs.e2b.dev) and its [machine-readable index](https://docs.e2b.dev/llms.txt). --- Source: https://e2b.dev/customers.md # E2B Customers > Companies use E2B as the secure computer layer beneath production AI agents. E2B reports that more than 100,000 teams have run a sandbox, that 94 of the Fortune 100 have signed up, and that more than one billion sandboxes have been started. ## Production patterns - **General-purpose agents:** A full virtual computer with tools, files, a browser, and long-running state. - **Vibe coding and app generation:** Fast, isolated environments that can install dependencies, build applications, and serve previews. - **Enterprise automation:** Sandboxed code execution for regulated and data-sensitive workflows. - **Code actions and data analysis:** Python and JavaScript execution with files, charts, tables, and rich results. - **Research and evaluations:** Hundreds or thousands of reproducible environments running in parallel. ## Selected case studies - [Genspark: a general-purpose AI agent for millions of users](https://e2b.dev/customers/genspark.md) - [Anything: a vibe-coding platform with more than one million users](https://e2b.dev/customers/anything.md) - [Manus: virtual computers for agents that use 27 tools](https://e2b.dev/customers/how-manus-uses-e2b-to-provide-agents-with-virtual-computers.md) - [Rogo: financial-services agents with Claude Managed Agents and E2B](https://e2b.dev/customers/rogo.md) - [StackAI: enterprise agents for regulated industries](https://e2b.dev/customers/stackai.md) - [Groq: compound AI systems powered by E2B](https://e2b.dev/customers/groqs-compound-ai-models-are-powered-by-e2b.md) - [Lindy: AI workflows using E2B Code Action](https://e2b.dev/customers/lindy-powers-ai-workflows-with-e2b-code-action.md) - [Hugging Face: parallel sandboxes for Open R1](https://e2b.dev/customers/how-hugging-face-is-using-e2b-to-replicate-deepseek-r1.md) - [LM Arena: sandboxed web-development evaluations](https://e2b.dev/customers/how-lmarena-collaborated-with-e2b-to-build-llm-web-development-evals.md) ## Explore further - [All content in the machine-readable sitemap](https://e2b.dev/sitemap.md) - [E2B for Enterprise](https://e2b.dev/enterprise.md) - [Talk to an E2B engineer](https://e2b.dev/contact.md) --- Source: https://e2b.dev/enterprise.md # E2B for Enterprise > Run agents your security team can sign off on. Every agent session runs in its own Firecracker microVM. Control egress per sandbox and keep credentials outside the guest. Run in E2B Cloud or in your own AWS or GCP account. ## In production - More than one billion sandboxes started. - More than 10 million SDK downloads a month across npm and PyPI. - 94 of the Fortune 100 have signed up. - BYOC in production on AWS and GCP. - SOC 2 Type II report available from the trust center at https://trust.e2b.dev. - Customers with published case studies include Genspark, Hugging Face, Manus, Lindy, Groq, Gumloop, and Rogo. ## Security Each control is documented, and the runtime is Apache-2.0, so a security team can read what it is approving. - Isolation: a Firecracker microVM with its own guest kernel per session, on KVM. A kernel exploit inside the sandbox still needs a Firecracker escape to reach the host. Each microVM has its own memory and supports pause, snapshot, and fork. - Network: egress allow and deny per sandbox by IP, CIDR, or domain. Outbound traffic can be routed through a SOCKS5 proxy the customer runs (private beta); egress fails closed if the proxy is unreachable. Public sandbox URLs can require a per-sandbox access token. - Secrets: values resolve at egress. No API response, log, or sandbox holds them. - Observability: OpenTelemetry metrics and logs to a customer OTLP endpoint on the Enterprise plan. Every lifecycle event is delivered as a signed webhook. - Compliance: SOC 2 Type II. The SOC 2 report, bridge letter, penetration test report, and DPA template are in the trust center. HIPAA BAA and the subprocessor list are available on request. - Security contact: security@e2b.dev. ## Deployment options The same SDK, CLI, and API work across every option, so changing deployment does not require rewriting the integration. ### E2B Cloud (available) - E2B control plane and data plane, operated by E2B on Google Cloud in US, EU, and APAC regions. One microVM per session. - Keys and storage managed by E2B on Google Cloud. - Provisioning: sign up. - Best for most teams. ### BYOC on AWS and GCP (available) - E2B control plane; data plane in the customer's VPC. Sandbox traffic goes from the client to the VPC, never through E2B Cloud. Aggregate CPU and memory metrics and control-plane API traffic reach E2B. - Customer IAM role, VPC, storage, and cloud audit log. - Provisioned with Terraform and machine images. E2B provisions, monitors, and operates the cluster. - Best for regulated data and for teams selling into enterprises. - Azure BYOC is in progress. ### Private cloud (in development) - Control plane and data plane inside the customer boundary. Nothing leaves. Terraform, inside the customer network. - Best for air-gapped, sovereign, and on-prem networks. Design partners welcome. ### E2B Embed (available) - The full E2B stack on one node: control plane, Firecracker sandboxes, and local storage for databases, templates, and logs. Nothing leaves the node. - Install with Docker Compose, Terraform on GCP, or Kubernetes. Requires Linux x86-64 with KVM. Each install generates its own team API key. - Public and open source under Apache-2.0. - Best for self-hosting, embedding E2B inside your own product, and deploying into a customer's tenancy. All three are supported patterns. - [Install E2B Embed](https://github.com/e2b-dev/runtime/tree/main/embed#readme). ## Controls | Control | Detail | E2B Cloud | BYOC | | --- | --- | --- | --- | | Egress | Allow and deny per sandbox by IP, CIDR, or domain. Customer SOCKS5 proxy in private beta, fails closed. | Yes | Yes | | Secrets | Values resolve at egress; no API response or sandbox holds them. Short-lived OIDC identity tokens in private beta. | Yes | Yes | | Encryption | TLS in transit. At rest under Google Cloud's default encryption on E2B Cloud; under the customer's own controls on BYOC. | Yes | Yes | | Network placement | Internal load balancer and VPC peering keep sandbox traffic in the customer's private network. | N/A | Yes | | Observability | OpenTelemetry metrics and logs to a customer OTLP endpoint on Enterprise, best-effort delivery. Signed lifecycle webhooks. | Yes | Yes | | Regions | US, EU, and APAC on E2B Cloud. Customer region on BYOC. | Yes | Yes | | Provisioning | Terraform and machine images. E2B provisions and monitors the cluster. | N/A | Yes | | SLA and support | Uptime and support terms are set in the Enterprise agreement. Discord and support@e2b.dev on every plan. | Yes | Yes | | Compliance | SOC 2 Type II report, penetration test report, and DPA in the trust center. HIPAA BAA and questionnaire on request. | Yes | Yes | SSO, SCIM, and RBAC are planned; ask E2B about timelines. Security FAQ: https://docs.e2b.dev/faq/security-and-compliance. ## Customers - Gumloop: "E2B gives us a fast, secure way to run AI-generated code at scale, so we can ship workflow automation our enterprise customers trust." Rahul Behal, Co-founder. - Rogo runs 10,000 to 15,000 concurrent sandboxes for agents serving financial institutions, with Claude Managed Agents and E2B. - Genspark runs a general-purpose agent for millions of users, each task in its own machine. - Manus gives each agent 27 tools on a full machine, in production. ## How teams buy - Usage-based: start on Hobby or Pro. Billed per second for CPU and RAM while a sandbox runs. Paused sandboxes are not billed. - Committed use: a one-year minimum usage commit for higher concurrency at lower rates, custom session length and resources, and an Enterprise agreement with SLA and support terms. - BYOC: Enterprise plan. E2B provisions and operates the cluster in the customer's AWS or GCP account. ## Next steps - [Book a call with an engineer](https://e2b.dev/contact.md). The first call covers an architecture review for your boundary, your security questionnaire, and pricing for your concurrency and regions. - Email [security@e2b.dev](mailto:security@e2b.dev) for security questions and questionnaires. - [Review the security and compliance FAQ](https://docs.e2b.dev/faq/security-and-compliance). - [Visit the trust center](https://trust.e2b.dev/). - [Read the BYOC documentation](https://docs.e2b.dev/byoc). - [See pricing](https://e2b.dev/pricing.md). - [Review customer case studies](https://e2b.dev/customers.md). --- Source: https://e2b.dev/security.md # Security and compliance > E2B runs untrusted, AI-generated code in isolated cloud sandboxes. This page states E2B's compliance status, what an independent auditor has verified, and how to get the underlying reports. E2B is SOC 2 Type II compliant. E2B signs HIPAA Business Associate Agreements on Enterprise plans. Every sandbox runs in its own Firecracker microVM, so code from one customer cannot read or reach another's. E2B's contracting entity is FoundryLabs, Inc., a Delaware corporation. ## SOC 2 Type II E2B maintains a SOC 2 Type II report. The report is available under NDA from the E2B Trust Center at https://trust.e2b.dev, and a current bridge letter is available. A SOC 2 Type II report tests whether controls operated effectively across an entire audit period, rather than whether they were designed correctly on a single day. When a period ends, E2B publishes a bridge letter covering the gap until the next report is issued. SOC 2 does not certify a product; it attests that an independent auditor tested E2B's controls and found them operating as described. ### Documents - SOC 2 Type II Report: request access at https://trust.e2b.dev, under NDA. - SOC 2 Bridge Letter: opens at https://trust.e2b.dev, no request needed. - Penetration Test: request access at https://trust.e2b.dev, under NDA. - Data Processing Addendum: request access at https://trust.e2b.dev. - Certificate of Liability Insurance: request access at https://trust.e2b.dev. - HIPAA Business Associate Agreement: email trust@e2b.dev. - Subprocessor list: email trust@e2b.dev. - Completed security questionnaire: email trust@e2b.dev. ## HIPAA - Does E2B sign a HIPAA Business Associate Agreement (BAA)? Yes. E2B signs a HIPAA Business Associate Agreement on Enterprise plans. Email trust@e2b.dev to start one. - Can I process PHI on E2B? Protected health information may be processed on E2B under a signed Business Associate Agreement, on Enterprise plans. Without a signed BAA in place, do not send PHI to E2B sandboxes. - Is E2B HIPAA compliant? Yes. E2B supports HIPAA-regulated workloads under a signed Business Associate Agreement, which E2B offers on Enterprise plans. E2B maintains the technical safeguards the HIPAA Security Rule requires: encryption in transit and at rest, unique account authentication, restricted production access, audit logging, and per-sandbox microVM isolation. Those controls are independently tested under SOC 2 Type II. There is no such thing as a HIPAA certificate; HHS runs no certification program for any vendor. HIPAA compliance is a property of how a covered entity and its business associate operate together, and the BAA is what establishes it. ## Isolation and tenancy Every E2B sandbox runs in its own Firecracker microVM with its own kernel. Isolation is at the hypervisor boundary, not the container or process boundary, which is what makes it safe to run untrusted or AI-generated code. Sandboxes never share a kernel, a filesystem, or memory with another customer's sandboxes. Sandboxes are destroyed on timeout or shutdown. Filesystem and memory state can be preserved across a pause and restored on resume. ## Where sandboxes run E2B's managed sandboxes run on Google Cloud. Sandbox storage sits under Google Cloud's default encryption at rest. Traffic to and from sandboxes is encrypted with TLS. Available regions, and the plan each is available on, are listed at https://docs.e2b.dev/faq/egress-ip-ranges. ## Bring Your Own Cloud (BYOC) BYOC deploys E2B sandboxes inside your own VPC, in your own AWS or Google Cloud account. BYOC is available on Enterprise plans. Azure is not yet supported. Under BYOC, sandbox traffic, template build sources, snapshots, and logs stay inside your VPC and never reach E2B Cloud. Only anonymized cluster CPU and memory metrics are sent to E2B. Traffic between E2B Cloud and your VPC is TLS-encrypted, and VPC peering is available. Storage lives in your account, under your own encryption, retention, and access controls. For a regulated workload this means the data residency, key management, and audit logging that apply are your own. E2B's SOC 2 Type II report covers the E2B software and control plane; the cloud account it is deployed into, and that account's compliance posture, remain yours. BYOC is a managed deployment in your account, not self-hosting. ## Controls E2B's security controls are continuously monitored with Vanta, spanning infrastructure security, product security, organizational security, internal security procedures, and data privacy. Each control and its current status are published at https://trust.e2b.dev/controls. E2B commissions independent penetration testing, and the report is available under NDA. For GDPR, a Data Processing Addendum is available; request the template from the Trust Center, or email trust@e2b.dev for a signed copy. ## Security and compliance questions? Email trust@e2b.dev for a BAA, a signed DPA, a completed security questionnaire, or the subprocessor list. Report security vulnerabilities to security@e2b.dev. Contact E2B before running any test against E2B; the terms of service at https://e2b.dev/terms require prior written consent. --- Source: https://e2b.dev/open-source.md # E2B Open Source > E2B's core sandbox stack is public under Apache-2.0: SDKs, CLI, runtime, control plane, and Firecracker-based microVM layer. ## Why the stack is open - **Inspect the isolation boundary:** Security teams can review the code that runs and isolates agent workloads. - **Self-host the runtime:** Deploy the stack into infrastructure you operate, including AWS or GCP through Terraform. - **Keep an exit path:** The runtime is not available only as a managed proprietary service. - **Build in public:** Issues, pull requests, examples, and developer feedback shape the product. ## Main repositories - [e2b-dev/E2B](https://github.com/e2b-dev/E2B): Python and JavaScript SDKs plus the E2B CLI. - [e2b-dev/runtime](https://github.com/e2b-dev/runtime): Orchestrator, control plane, Firecracker runtime, and Terraform deployment. - [e2b-dev/code-interpreter](https://github.com/e2b-dev/code-interpreter): Execute Python or JavaScript and return charts, tables, images, and other rich results. - [e2b-dev/desktop](https://github.com/e2b-dev/desktop): Graphical Linux desktops with screen, mouse, keyboard, and a live stream for computer-use agents. - [e2b-dev/fragments](https://github.com/e2b-dev/fragments): Open-source prompt-to-app example that builds and serves generated applications in sandboxes. - [e2b-dev/surf](https://github.com/e2b-dev/surf): Open-source computer-use agent running in an E2B desktop sandbox. ## Managed and self-hosted options The open-source runtime and E2B Cloud use the same product model: an isolated machine per agent session controlled through the E2B API. Use the managed cloud when E2B should operate the infrastructure, BYOC when the data plane must run in your AWS or GCP account, or self-host when your team will operate the full stack. ## Project scale E2B reports more than 25,000 GitHub stars across its repositories, more than 10 million monthly SDK downloads across npm and PyPI, and more than one billion sandboxes started on the runtime. Live repository counts can change; use GitHub for current figures. ## Start here - [E2B GitHub organization](https://github.com/e2b-dev) - [Self-hosting repository](https://github.com/e2b-dev/runtime) - [E2B documentation](https://docs.e2b.dev) - [Quickstart for the managed API](https://docs.e2b.dev/quickstart) - [Enterprise deployment options](https://e2b.dev/enterprise.md) --- Source: https://e2b.dev/cookbook.md # E2B Cookbook > Complete example projects for combining E2B sandboxes with language models, agent frameworks, data sources, and web applications. ## What the examples cover - Code interpreters in Python, JavaScript, and TypeScript. - Streaming code execution from Next.js applications. - Dataset upload, analysis, and visualization. - Agent frameworks including LangChain, LangGraph, and AutoGen. - Model providers including Anthropic, OpenAI, Meta, Mistral, Together AI, Fireworks AI, IBM watsonx.ai, and Groq. - Web research and scraping workflows using Firecrawl. ## Selected examples - [Claude Code Interpreter in Python](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/claude-code-interpreter-python) - [Claude Code Interpreter in JavaScript and TypeScript](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/claude-code-interpreter-js) - [OpenAI Code Interpreter in Python](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/gpt-4o-python) - [OpenAI Code Interpreter in JavaScript and TypeScript](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/gpt-4o-js) - [Next.js code interpreter with streaming](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/nextjs-code-interpreter) - [LangChain with code interpreting](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/langchain-python) - [LangGraph with code interpreting](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/langgraph-python) - [Analyze an uploaded dataset with Llama 3](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/upload-dataset-code-interpreter) - [Scrape and analyze Airbnb data with Firecrawl](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/firecrawl-scrape-and-analyze-airbnb-data) - [IBM watsonx.ai Code Interpreter in Python](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/watsonx-ai-code-interpreter-python) ## Choose an interface Use the base Sandbox SDK for commands, files, networking, and lifecycle control. Use Code Interpreter when the application needs `runCode()` and rich notebook-style results. Use Desktop Sandbox when the agent needs a screen, mouse, keyboard, or browser. ## Start building - [Browse the complete cookbook repository](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples) - [Read the E2B quickstart](https://docs.e2b.dev/quickstart) - [Read the SDK documentation](https://docs.e2b.dev) - [Suggest an example](https://e2b.dev/contact.md) --- Source: https://e2b.dev/startups.md # E2B for Startups > A program for early-stage teams building AI agents on E2B. Approved startups receive one-time $20,000 in E2B credits and membership in the Pro tier. ## Program benefits Approved teams receive: - One-time $20,000 in E2B usage credits. - Membership in the E2B Pro tier. - An isolated Linux machine per agent session, with a shell, filesystem, network access, and an optional desktop. - Custom sandbox CPU and RAM. - Up to 100 concurrently running sandboxes, expandable to 1,100 with a paid add-on. - Sandbox sessions up to 24 hours, with free pause and resume. - Any model and any agent framework. The runtime is Apache-2.0. ## Eligibility Applicants must meet all three criteria: - The startup has raised less than $5 million. - The startup was founded less than three years ago. - The team is a first-time E2B user. Capacity is limited, so meeting the criteria does not guarantee acceptance. Open-source projects are welcome but not required. A rejected team may reapply three months after the decision. ## Typical projects Coding agents, data analysis and visualization, code-generation evals, computer use, generative interfaces, deep research, and general-purpose agents. ## Apply In YC, a16z Speedrun, or Antler? Apply through your program's portal for additional E2B credits. - [Submit the startup application](https://e2b.dev/startups/apply). - [Review E2B pricing](https://e2b.dev/pricing.md). - [Read the quickstart](https://docs.e2b.dev/quickstart). - [Contact E2B](https://e2b.dev/contact.md). --- Source: https://e2b.dev/research.md # E2B for Research > A program for research teams at universities, public research institutes, and nonprofit research organizations that build, evaluate, or study AI agents and models on E2B. Approved teams receive one-time $20,000 in E2B credits and membership in the Pro tier. ## Program benefits Approved teams receive: - One-time $20,000 in E2B usage credits. - Membership in the E2B Pro tier. - An isolated Linux machine per experiment or agent session, with a shell, filesystem, network access, and an optional desktop. - Custom sandbox CPU and RAM. - Up to 100 concurrently running sandboxes, expandable to 1,100 with a paid add-on. - Sandbox sessions up to 24 hours, with free pause and resume. - Any model and any agent framework. The runtime is Apache-2.0. ## Eligibility Applicants must meet both criteria: - The team is affiliated with a university, public research institute, or nonprofit research organization. - The team is a first-time E2B user. Capacity is limited, so meeting the criteria does not guarantee acceptance. Open-source publication is welcome but not required. A rejected team may reapply three months after the decision. ## Typical research Agent evaluations, reinforcement learning rollouts, code-generation benchmarks, data analysis, computer-use agents, and general-purpose agents. Each run gets its own isolated machine, and sandboxes run in parallel, so experiments stay reproducible and independent. ## Apply - [Submit the research application](https://e2b.dev/research/apply). - [Read the Hugging Face Open R1 case study](https://e2b.dev/customers/how-hugging-face-is-using-e2b-to-replicate-deepseek-r1.md). - [Read the Arena web-development evals case study](https://e2b.dev/customers/how-lmarena-collaborated-with-e2b-to-build-llm-web-development-evals.md). - [Contact E2B](https://e2b.dev/contact.md). --- Source: https://e2b.dev/careers.md # Careers at E2B > E2B builds the sandbox runtime that AI agents run on: secure Firecracker microVMs that start in milliseconds and operate at production scale. ## The work E2B is building infrastructure for agents that execute code, use computers, work with files, access networks, and run for extended periods. The product spans microVM orchestration, snapshots, networking, storage, observability, SDKs, developer tools, and the managed cloud. E2B reports more than 100,000 teams that have run a sandbox, more than one billion sandbox starts, and signups from 94 of the Fortune 100. The core runtime is open source, so engineering work is developed with direct feedback from builders. ## How the team works - **High agency:** Notice important work, own it, and move without waiting for a detailed specification. - **Ambition to ship:** Measure progress by what reaches users, then improve it through iteration. - **Humility and curiosity:** Hold strong opinions loosely and let the best argument win. - **Developer experience:** Start decisions from what builders need and learn from public product feedback. ## Benefits For US employees, published benefits include top-spec hardware and AI tooling, a $2,000 personal equipment budget, medical, dental, and vision coverage, gym reimbursement, unlimited trust-based paid time off, and a 401(k). Office benefits include meals, eligible transport, and a living-proximity allowance. Benefits elsewhere follow local laws and standards. ## Open positions Openings change over time. Use the live [E2B careers page](https://e2b.dev/careers) or [E2B job board](https://jobs.ashbyhq.com/e2b) for the current list, locations, role requirements, and application links. ## Learn about E2B - [About E2B](https://e2b.dev/about.md) - [E2B Open Source](https://e2b.dev/open-source.md) - [Customer stories](https://e2b.dev/customers.md) --- Source: https://e2b.dev/about.md # About E2B > E2B provides AI agents with secure, on-demand machines and real-world tools. The company is building the cloud layer between an agent's models and the work it performs. ## Why E2B exists Traditional containers, Kubernetes clusters, and virtual machines were designed to run software defined ahead of time. Agents generate code and choose actions at runtime, so they need a different execution environment: isolated from the host, fast enough for interactive products, stateful when work takes time, and equipped with the same kinds of tools a person uses on a computer. E2B gives every agent session a Firecracker microVM with its own kernel. The sandbox exposes shell, filesystem, network, storage, desktop, lifecycle, and observability capabilities through an API. ## Company E2B was founded in 2023 by Vasek Mlejnsky and Tomas Valenta. Its legal name is FoundryLabs, Inc., and the team operates from San Francisco and Prague. The project began when the founders connected an agent to sandbox technology from their earlier developer-tool work. They shifted their focus from the agent itself to the reusable machine underneath it and released the first E2B SDK in 2023. ## Milestones - The Python SDK launched in 2023, followed by JavaScript, Code Interpreter, and Desktop products. - E2B SDK 1.0 shipped in 2024. - Desktop Sandbox added a graphical Linux environment for computer-use agents in 2024. - E2B announced a $21 million Series A in 2025. - E2B passed one billion sandbox starts in 2026. - E2B reports that 94 of the Fortune 100 have signed up. - More than 100,000 teams have run at least one sandbox on E2B. ## Direction E2B is building infrastructure that adapts to an agent's workload while remaining independent of the model and orchestration framework. The sandbox is the place where an agent's code, tools, files, data connections, and actions come together. Teams can use E2B Cloud, place the data plane in their own cloud, or operate the open-source runtime. ## Learn more - [Product overview](https://e2b.dev/index.md) - [Open-source projects](https://e2b.dev/open-source.md) - [Careers](https://e2b.dev/careers.md) - [Customer stories](https://e2b.dev/customers.md) - [Contact E2B](https://e2b.dev/contact.md) --- Source: https://e2b.dev/brand.md # E2B Brand Assets > Official E2B marks for product interfaces, editorial work, partnerships, events, and press. ## Downloads - [Download the complete E2B brand asset pack](https://e2b.dev/brand/e2b-brand-assets.zip): SVG and transparent PNG versions. - [Browse individual marks](https://e2b.dev/brand): Choose logotype or symbol, color, artwork size, and file format. The library contains the E2B logotype and the compact E2B symbol in white, black, and Fire Orange. Each mark is supplied in Large, Medium, and Small artwork variants that are optically adjusted for their intended rendered size. ## Choosing a mark - Use the full logotype whenever space allows. - Use the symbol when the full logotype would not remain clear and legible. - Use black artwork on light or Fire Orange backgrounds. - Use white artwork on dark backgrounds and gradients. - Select the artwork size closest to the final rendered height: Large around 60 px, Medium around 30 px, or Small around 15 px. ## Usage rules - Keep clear space equal to at least half the mark's height on every side. - Keep the logotype at 15 px tall or larger. - Do not warp, rotate, recolor, or alter the mark's proportions. - Avoid black drop shadows. Over imagery, use only a subtle shadow or container when needed for legibility. ## Core colors | Name | Hex | | --- | --- | | Midnight Black | `#000000` | | Clarity White | `#FFFFFF` | | Fire Orange | `#FF3001` | ## Company naming Use **E2B** as the product and company name. The legal entity is **FoundryLabs, Inc.** E2B describes its product as **The AI Agent Cloud**. For questions about press, partnerships, or brand usage, email [hello@e2b.dev](mailto:hello@e2b.dev). --- Source: https://e2b.dev/contact.md # Contact E2B > Reach the E2B team for product questions, enterprise architecture, deployment, security, partnerships, or community help. ## Contact options - **General and product questions:** [hello@e2b.dev](mailto:hello@e2b.dev) - **Enterprise, pricing, and architecture:** [enterprise@e2b.dev](mailto:enterprise@e2b.dev) - **Security:** [security@e2b.dev](mailto:security@e2b.dev) - **Community:** [Join the E2B Discord](https://discord.com/invite/U7KEcGErtQ) - **Careers:** [View open positions](https://e2b.dev/careers.md) ## Book a call Use the [contact page](https://e2b.dev/contact) to book a 30-minute call with the team. If the available times do not work, email [enterprise@e2b.dev](mailto:enterprise@e2b.dev) with your preferred times. For implementation questions, start with the [documentation](https://docs.e2b.dev), [quickstart](https://docs.e2b.dev/quickstart), or [Discord community](https://discord.com/invite/U7KEcGErtQ). --- Source: https://e2b.dev/resources/build-an-agent-workbench-on-openais-agents-api.md Published: 2026-09-10 # Build an Agent Workbench on OpenAI's Agents API OpenAI's [Agents API](https://developers.openai.com/api/docs/guides/agents-api/overview) is a hosted Codex runtime that connects to sandbox providers like E2B. OpenAI owns the model, the harness, and session lifecycle, and E2B owns where the agent's code executes. The following example is a workbench built on top of it. - [Full cookbook example](https://github.com/e2b-dev/e2b-cookbook/tree/main/examples/openai-agents-api-python-sdk) - [Docs](https://docs.e2b.dev/agents/openai-agents-api) OpenAI supports two ways to provision E2B: [application-managed](https://developers.openai.com/api/docs/guides/agents-api/environments/providers/e2b#application-managed) and [webhook-managed](https://developers.openai.com/api/docs/guides/agents-api/environments/providers/e2b#webhook-managed). This example is application-managed: your application calls the E2B SDK directly to start, connect, and stop the sandbox, so the sandbox's lifecycle lives in your own code alongside the Agents API session. The workbench's new chat screen, prompting for an E2B API key and OpenAI API keys before starting a session ## Booting warm from a template E2B sandboxes are built on Firecracker microVMs, so each session gets an isolated machine that cold-starts in under 60ms, optimizing chats for user experience. The workbench builds its sandbox from a template with the Codex exec-server already baked in instead of installing dependencies at request time. Create the sandbox and connect to its terminal with the E2B CLI: ```bash e2b sbx create openai-agents-api-python-sdk ``` ## Every session in its own machine The workbench consists of a Flask backend that pairs an Agents API session with an E2B sandbox for every chat, and a React frontend built on TanStack Router and Query. Each session gets an E2B sandbox running the Codex executor; OpenAI runs the agent and maintains session state. When a user sends the first prompt, the backend creates an Agents API session and an E2B sandbox together, then streams the turn back to the frontend as it runs. Scoping the sandbox to the chat instead of sharing one sandbox across the whole backend process means each conversation's agent can't see or touch another's filesystem. Teardown is per-chat too, and closing one conversation doesn't affect anyone else's session. ## What's wired up - **Tools**: OpenAI docs MCP, web search scoped to openai.com, and a function tool with the full result round trip - **Sessions**: Streaming events, follow-ups, cancel, delete, and persistence across a backend restart - **Pause and fork**: Branching a chat from its snapshot into a new sandbox and session - **Visibility**: A workspace file viewer and live executor logs --- Source: https://e2b.dev/resources/devin-outposts.md Published: 2026-07-21 # Use E2B as the Execution Layer For Devin Outposts Devin was the moment the industry realized agents could do real engineering work. As agents become part of everyday software development, they need the same infrastructure as the developers they work alongside: the same dependencies, tooling, and access to internal systems. For many organizations, that also means keeping execution inside their own cloud. Devin Outposts lets you run Devin sessions inside infrastructure you control. By pairing Outposts with our Bring Your Own Cloud (BYOC) offering, each Devin session runs on an E2B microVM that you can configure with the CPU, RAM, and disk your workload needs. Devin can securely access private repositories, internal APIs, package registries, and other VPC-only services while execution remains entirely within your cloud boundary. E2B also adds snapshot functionality to every Outposts session. If a Devin session needs to be paused, it can be resumed quickly without losing its filesystem, running processes, or other state. Because E2B's microVMs are built on Firecracker, snapshotting and restoring are built in, and Devin can pick up exactly where it left off almost instantly. **Get started:** [E2B + Devin Guide](https://docs.e2b.dev/agents/devin-outposts) We're excited to see what developers build with Devin and E2B. --- Source: https://e2b.dev/resources/e2b-sandboxes-are-now-available-through-stripe-projects.md Published: 2026-06-10 # E2B sandboxes are now available through Stripe Projects ‍We're excited to join the Stripe Projects developer preview as a partner. If you've built anything with AI coding agents, you've run into the same wall: the agent can write the code, but getting it somewhere to run requires a human to step in. You provision infrastructure, generate an API key, name it something like agent-testing-foo-1234, and hope you remember which agent it belongs to when something breaks. It's a structural gap in how agents interact with the services they depend on. There's no standard protocol for an agent to say "I need a sandbox" and receive authenticated, scoped credentials back without a developer acting as an intermediary every time. When Stripe brought us in as a partner on the Agentic Provisioning Protocol, the goal was to fix exactly that. Now, the agent can use Stripe Projects to discover, provision, and authenticate a secure E2B sandbox, getting credentials in its environment so it can immediately start running code, without a human touching a dashboard. **Stripe as the trust layer** Stripe Projects acts as the trust authority between developers, their agents, and service providers like E2B. Because Stripe already knows who you are and has your payment method, it can vouch for you to any provider in the network, so provisioning an E2B sandbox becomes a single CLI command: ```bash stripe projects add e2b ``` There's no signup flow and no need to manually retrieve your API keys. The agent runs one command and gets back working credentials. ## **What this means for credentials in practice** Credentials are delivered as environment variables and synced directly to your environment. When someone joins the team, switches machines, or a new agent session starts, simply run: ```bash stripe projects env --sync ``` Rotation works the same way. One command issues a new key, revokes the old one, and updates the environment: ```bash stripe projects rotate e2b stripe projects env --sync ``` **Why we co-designed the protocol** Secure, reliable code execution is core to what E2B does, so the credentials and ownership model mattered a lot to us. Resources need to live in the user's own account. Credentials need to be scoped, auditable, and rotatable. Provisioning needs to be deterministic enough that an agent can rely on it. When Stripe reached out, we saw an opportunity to help get this right. Stripe handles payment via a Shared Payment Token. Your card details never leave Stripe, and E2B never sees them. The whole flow is auditable and repeatable from the CLI. **What agents can do once provisioned** Once an E2B sandbox is provisioned, the credentials are available in the environment and an agent can take it from there with the full E2B SDK: creating and managing sandboxes, executing code, handling long-running tasks, taking snapshots, and managing lifecycle, without any human in the loop. And with E2B's prebuilt templates for [OpenCode](https://docs.e2b.dev/agents/opencode), [Codex](https://docs.e2b.dev/agents/codex), [Claude Code](https://docs.e2b.dev/agents/claude-code), and [Amp](https://docs.e2b.dev/agents/amp), they're ready to run right away. E2B sandboxes run on Firecracker microVMs for kernel-level isolation, support any language or framework, and can run for up to 24 hours. The Stripe Projects provisioning step is the bridge from "I need compute" to "I have a fully authenticated E2B environment." **Getting started** Install the Stripe CLI, run `stripe projects init my-app`, and select E2B to provision a sandbox. ```bash brew install stripe/stripe-cli/stripe && stripe plugin install projects stripe login stripe projects init my-app stripe projects add e2b stripe projects env --sync ``` We'd love to hear about what you build with Stripe Projects and E2B. Reach out at hello\[at]e2b.dev or tag us on [LinkedIn](https://www.linkedin.com/company/96484695/admin/dashboard/) or [X](https://x.com/e2b).  We're excited to continue evolving the standard and to work with Stripe on sharing a more official specification soon.  If you want your platform to integrate with E2B, reach out at hello\[at]e2b.dev. --- Source: https://e2b.dev/resources/not-affected-by-copy-fail-heres-why.md Published: 2026-04-30 # E2B Sandboxes Aren't Affected by Copy Fail (CVE-2026-31431). Here's why. Theori disclosed CVE-2026-31431 yesterday. A 732-byte PoC Python script. Deterministic root on essentially every Linux system shipped since 2017. If you run untrusted code, this is the kind of bug worth stopping for. **E2B sandboxes are not affected. By design**. ## Background `algif_aead` is a kernel module that exposes the crypto API to userspace via `AF_ALG` sockets. A 2017 in-place optimization let page cache pages land in a writable scatterlist during AEAD operations. Combined with `splice()`, an unprivileged process gets a deterministic 4-byte write into the kernel's page cache, the in-memory copy of any file the system reads. Aim those 4 bytes at `/usr/bin/su`. Run `su`. You're root. Three properties make this lethal in shared-kernel environments: - **Deterministic**. - **Cross-tenant**. The page cache is shared host-wide. A write from one container reaches every other tenant on that host. - **Invisible**. Corruption only exists in memory. Disk forensics show the original file. Theori named Kubernetes clusters, CI runners, and "cloud SaaS running user code" as priority targets for patches. That last category covers **most** sandbox-as-a-service providers. ## Why E2B is not affected. **Per-sandbox kernels**. Every E2B sandbox runs in its own [Firecracker microVM](/resources/firecracker-vs-qemu). Own kernel, own memory, own page cache. Bugcrowd's analysis of Copy Fail puts it cleanly: the boundaries that hold are the ones that don't share a kernel. A kernel exploit inside the sandbox cannot reach the host: the attacker would need a Firecracker escape on top of the kernel bug. **The module isn't compiled in**. We build custom minimal kernels for agent sandboxes. These run code interpreters, drive browsers and CLIs, power RL rollouts, and host long-running agents. `CONFIG_CRYPTO_USER` and `CONFIG_CRYPTO_USER_API_AEAD` have never been enabled, cause they're not needed by AI agents. ```text # CONFIG_CRYPTO_USER is not set # CONFIG_CRYPTO_USER_API_AEAD is not set ``` `‍`Fewer features mean fewer places for vulnerabilities. ## If your sandbox provider runs on containers Ask them three questions today: 1. Have you patched every host kernel? 2. What was your exposure window? 3. Could one tenant have written into another tenant's page cache before the patch? ## What you should do Patch to mainline `a664bf3d603d`. Ubuntu 26.04 (Resolute) and later are unaffected. If you can't patch immediately: ```bash echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf rmmod algif_aead 2>/dev/null || true ``` Container platforms running untrusted workloads: block `AF_ALG` socket creation with seccomp even after patching. Almost nothing legitimate uses it. Security and isolation won't affect 99% of your day-to-day. The 1% when it does affect you outweighs the other 99% combined. The reason we chose VM-based architecture is that 1%. ‍ --- Source: https://e2b.dev/resources/e2b-is-now-in-agents-sdk.md Published: 2026-04-15 # E2B is now supported in the OpenAI Agents SDK We're happy to announce that E2B is a sandbox provider in the new [OpenAI Agents SDK](https://developers.openai.com/api/docs/guides/agents).  With this release, agents built with the OpenAI Agents SDK will get their own sandboxes featuring a custom environment with resource isolation, security boundaries, and persistence, requiring no infrastructure setup. Your agents will be able to: - Edit files and run shell commands in isolated environments - Maintain temporary workspace state across steps - Generate frontend output with live preview URLs - Produce artifacts you can review before publishing - Run multiple sandboxes in parallel for concurrent workloads ## **Integration takes just a few lines of code** You can set up computer use with just a few lines of code. You just need to define your tools, the agent to use them, and something to get started.