# MXC

> MIT Microsoft SDK for isolating untrusted agent code — Rust, .NET, Node

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://github.com/microsoft/mxc  
**GitHub:** https://github.com/microsoft/mxc  
**Added:** 2026-10-09

---

## The Hook

MXC is a Microsoft library for running untrusted workloads — model output, plugins, tools — in an OS-level sandbox from inside your own app, with one API over each platform’s isolation backend.

## What's Good

MIT (microsoft/mxc), v1.0.0. SDKs on crates.io (`mxc-sdk`), NuGet (`Microsoft.Mxc.Sdk`), and npm (`@microsoft/mxc-sdk`). Default backends: ProcessContainer on Windows 11, Bubblewrap on Linux, Seatbelt on macOS; optional LXC, WSLC, microVM, and Hyperlight backends where the host supports them. Useful when your agent product executes generated code and you want isolation without shipping a container runtime. ★~1.8k.

## The Catch

A library you embed in your app, not a runtime you point containers at. SDKs are Rust, .NET, and Node only — no Python. Backends depend on the host: macOS gets Seatbelt only, Windows needs Windows 11, and on Windows the Windows Sandbox, microVM, and Hyperlight backends are experimental. Vs gvisor (OCI runtime for containers) and openshell (sandboxed shell for agents): MXC is the in-process SDK lane.

## Verdict

MIT cross-platform sandbox SDK when your own app must run agent-generated code safely — Rust/.NET/Node only, isolation strength varies by host OS.