# AIO Sandbox

> Apache one container: browser+shell+files+VS Code+Jupyter+MCP

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://sandbox.agent-infra.com/  
**GitHub:** https://github.com/agent-infra/sandbox  
**Added:** 2026-09-25

---

## The Hook

AIO Sandbox packs browser, shell, files, VS Code, Jupyter, and MCP onto one shared-filesystem container so an agent gets a full workstation in a single image.

## What's Good

Apache-2.0 (agent-infra/sandbox). One `docker run` path (ghcr.io/agent-infra/sandbox), PyPI/npm clients, VNC browser + code-server + MCP on the same FS. Docs and API at sandbox.agent-infra.com. Designed as self-host all-in-one, not a managed microVM product.

## The Catch

Vs E2B, Daytona, and CubeSandbox (Thu managed/microVM sandbox lane): this is a self-host all-in-one container workstation, not hosted Firecracker sandboxes, a managed workspace SaaS, or a KVM density control plane. Quickstart docs use `--security-opt seccomp=unconfined`; set `SANDBOX_API_KEY` or API/Jupyter/VNC stay open by default.

## Verdict

Apache self-host all-in-one sandbox when one shared FS with browser+IDE+MCP beats a managed microVM — lock the API key and read the seccomp note before exposing it.