- Family
- Subsystem
- Role
- Subsystem · Infrastructure
- Status
- Open source
- Availability
- Source is public on GitHub under Apache 2.0. Runs on a single Linux host with cgroup v2.
A sandbox whose interface is the shell.
Each Workbox sandbox is a Linux process tree isolated with namespaces, cgroup v2 limits, a reduced capability set and a seccomp filter, running on its own writable overlay of a shared read-only root filesystem. Inside it, a small supervisor and the wb command let an agent discover what it can do through --help instead of fixed tool schemas. On the host, Workbox offers a REST and WebSocket API, a JavaScript SDK, an MCP server and an operator CLI.
Namespaces · cgroup v2
Isolation
Shell-first
Agent interface
REST · SDK · MCP
Host surfaces
Inside Workbox
How it works.
- 01Isolation by defaultNamespaces, cgroup v2 limits, a reduced capability set and a seccomp filter around every sandbox.
- 02Discover, don't memoriseInside the sandbox, wb tools and --help tell an agent what it can do, so the interface is the shell rather than a fixed schema.
- 03Cheap to startEach sandbox runs on its own writable overlay of a shared read-only root filesystem.
- 04Many ways inAn operator CLI, a REST and WebSocket API, a JavaScript SDK and an MCP server that can hand a task to a coding agent in a sandbox.
Connected thinking