Stack Gems
Menu
WorkbenchBestNewSkillsLogAboutSubmit
← Catalog

MXC

MIT Microsoft SDK for isolating untrusted agent code — Rust, .NET, Node

AI Agents / Sandbox · OSS/MIT · 2.9k

Reviewed 2026-10-09 · last push 2026-10-17 · repo checked 2026-10-19

Visit siteGitHub

What's Good

MIT (microsoft/mxc), v1.0.0. SDKs on crates.io (`mxc-sdk`), NuGet (`Microsoft.Mxc.Sdk`), and npm (`@microsoft/mxc-sdk`). Default backends: ProcessContainer on Windows 11, Bubblewrap on Linux, Seatbelt on macOS; optional LXC, WSLC, microVM, and Hyperlight backends where the host supports them. Useful when your agent product executes generated code and you want isolation without shipping a container runtime. ★~1.8k.

The Catch

A library you embed in your app, not a runtime you point containers at. SDKs are Rust, .NET, and Node only — no Python. Backends depend on the host: macOS gets Seatbelt only, Windows needs Windows 11, and on Windows the Windows Sandbox, microVM, and Hyperlight backends are experimental. Vs gvisor (OCI runtime for containers) and openshell (sandboxed shell for agents): MXC is the in-process SDK lane.

Verdict

MIT cross-platform sandbox SDK when your own app must run agent-generated code safely — Rust/.NET/Node only, isolation strength varies by host OS.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Reviewed on Stack Gems

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/mxc.svg)](https://stackgems.com/gems/mxc)

HTML

<a href="https://stackgems.com/gems/mxc"><img src="https://stackgems.com/badge/mxc.svg" alt="MXC reviewed on Stack Gems" height="20"></a>

Related

AI Agents →