Vercel Sandboxes are now generally available, providing an ephemeral compute primitive for safely executing untrusted code.
It lets teams run AI agent-generated outputs, unverified user uploads, and third-party code without exposing production systems.
Each sandbox runs inside Firecracker microVMs, isolated from your infrastructure, so code running in a sandbox is blocked from accessing environment variables, database connections, and cloud resources.
Sandboxes are in production use by teams including v0, Blackbox AI and RooCode.
To bootstrap a simple Node.js application that creates a Vercel sandbox, use the code below:
Read the full changelog