A sandbox is an isolated, fully managed compute environment where developers and AI coding agents can write, run, and test code without affecting production systems. Think of it as a disposable virtual machine spun up on demand.

Can I run Docker inside a sandbox?

Yes. Full VM-based sandboxes support Docker, system packages, and background services. This makes them ideal for integration tests and workflows that mirror a CI/CD environment exactly.

How fast do sandboxes start?

Tenki sandboxes go from API call to a live environment in under 2 seconds, with no cold-start image pulls between sessions. That latency budget is what makes sandboxes usable inside an agent loop: you can spin up a fresh environment between tool calls without making the user wait.

Can I customize the environment with my own dependencies?

Yes. You can define your environment using standard Dockerfiles, check them into source control, and share reproducible environments across your team. Sandboxes also support pre-captured environment snapshots to speed up boot times.

What architectures and platforms are supported?

Sandboxes run Linux microVMs on x86 hardware, and the SDKs and the Sandbox ADE desktop app are available for macOS and Linux (including Apple Silicon). Multi-region availability keeps access low-latency.

How does pricing work?

Pricing is per-second across CPU, memory, and storage. You only pay while a sandbox is actively running, and paused or idle sandboxes incur no compute charges. The first 5 GiB of storage is included, and resource limits scale with your workspace plan.

How do I connect to my sandbox?

Sandboxes support multiple connection methods including SSH, streamed shell output, and exposed preview URLs. Connections are tunneled securely, with no public IPs or open ports required.

Is this a good fit for AI coding agents?

Full VM sandboxes are a great fit for agents that need to run tests, compile code, or interact with Docker. Every agent task gets its own isolated workspace, so agents can work with root access without ever touching your host machine.

How do I get started?

Spin up your first environment in seconds with the TypeScript, Go, or Python SDK (or the CLI), or download the Sandbox ADE desktop app, launch a session, and point your agent at it.

SANDBOX SDK

Give your agent root
without giving it yours.

Companies deploy faster with Tenki

Sandbox SDK

Drive sandboxes from your code.

TypeScript, Go, and Python SDKs over the same microVMs. Authenticate with an API key and create sessions from your application.

1// npm install @tenkicloud/sandbox
2import { TenkiSandbox } from "@tenkicloud/sandbox";
3
4const sandbox = new TenkiSandbox();
5
6await using session = await sandbox.createAndWait({
7  cpuCores: 2,
8  memoryMb: 4096,
9});
10
11const result = await session.exec("bash", {
12  args: ["-lc", "uname -a && whoami"],
13});
14
15console.log(result.stdout);
~ 
~ 
~

"~/sandbox.ts"

Capabilities

microVMs that boot in under 2s with
isolation no container can touch.

Each session is a disposable environment where agents write, run, and ship code. Read the docs.

Isolated Environments

Every session runs in an isolated microVM with zero cross-contamination between workloads. Your code, dependencies, and secrets never leak across boundaries.

Bring your own agent

Works with Claude Code and Codex; more harnesses coming soon. The sandbox is the workspace, your agent is the driver.

Massive Parallelization

Spin up hundreds of sandboxes concurrently for batch workloads, evals, or multi-agent orchestration, each one fully isolated with dedicated resources.

Per-task sandboxes

Every agent task runs in its own ephemeral sandbox, with file system, network, and secrets fully isolated from your host machine.

Vibe Coding

Build it, run it, share it. Expose ports to ship live apps instantly. Any language, any framework.

Instant Provisioning

Go from API call to running sandbox in under 2s, no cold starts, no waiting on image pulls. Agents get a live environment before the next token is generated.

Workflow

Keep sandboxes awake, pay only when they work.

Most sandboxes cold-start on every task and bill you for idle time. Tenki keeps yours warm and ready, with no compute charge while it sits unused.

Startup

Other Sandboxes

Cold start on every task, with seconds of lag.

Tenki Sandbox

Kept awake and ready when your agent needs it.

While Idle

Other Sandboxes

Billed for idle compute, or torn down to save cost.

Tenki Sandbox

No compute charge when a sandbox is not in use.

State

Other Sandboxes

Filesystem and context are lost once the box is destroyed.

Tenki Sandbox

Filesystem and memory saved. Work resumes seamlessly.

Scaling

Other Sandboxes

Throughput is capped by how fast new boxes spin up.

Tenki Sandbox

Fan out hundreds of warm sandboxes in parallel.

Sandbox Security

Enterprise-grade security.

Isolation is the product. Each sandbox is a disposable, hardware-isolated VM, governed by the same controls your security team already audits.

Hardware-isolated microVMs

Every session runs in its own microVM with a dedicated kernel boundary, far stronger isolation than shared-kernel containers.

Wiped on teardown

Filesystem and memory live only for the session. When a sandbox is destroyed, its state is gone for good, with no residue between runs.

Secrets never cross boundaries

Credentials are scoped to a single session. Code, dependencies, and secrets never leak between sandboxes or onto your host.

Encrypted in transit

Sessions are reached over tunneled, authenticated connections, with no public IPs or open inbound ports.

Backed by the compliance program of our parent company, Luxor Technology.

How Tenki Protects Customers

Sandbox ADE

The Agentic Development Environment (ADE)
offers another way to use Sandboxes.

The Sandbox ADE is a native desktop app for macOS and Linux that orchestrates Sandbox sessions for your agents. Launch a session, point your agent at it, and review every change before anything ships.

Pricing and Limits

Pay for what runs.
Upgrade your workspace to raise limits.

Compute Cost	Per Hour	Per Second
CPUper core	$0.0504	$0.000014
Memoryper GiB	$0.0162	$0.0000045
Storageper GiB	$0.000108	$0.00000003

Billed per-second across CPU, memory, and storage; the per-hour rate is shown for reference. First 5 GiB of storage included. Usage draws from your workspace monthly credits.

See all plans →

Testimonials

Don't believe us.
Believe them.

Tenki offers a nice alternative with minimal migration effort. The combination of improved performance and dramatic cost savings makes it worth serious consideration.... I don’t see the point of using GitHub-hosted runners anymore.

Thomas Sanlis

Indie Maker & Founder

Really enjoying the experience with Tenki so far! It feels just like using GitHub Actions with their hosted-runners but only much more affordable. As a bootstrapped startup, the drop in our CI costs has been a huge boost for us!

Arnar Þór Sveinsson

Co-founder & CTO

Been using Tenki for a month now and it's incredible. 2x faster than github and cheaper. But the winner has been excellent support from Hayssem and the team. Highly recommended!

Daniel Donaldson

SWE Manager

We eat our own dogfood here at Luxor. The firmware team switched very early to Tenki to host our collaborative reverse-engineering tools. It's been 100% reliable.

Jan Beck

Head of Firmware

I switched my GitHub Actions to Tenki Cloud in just two minutes: no config changes, no friction. My builds now run faster and cost less thanks to Tenki’s bare metal runners. CI/CD finally feels fast, fair, and affordable.

Ayush Gharat

Founder

Switching to Tenki Cloud runners took seconds and they have been consistent, fast and reliable since day one. No hidden fees and no hassle.

Chris Zeuch

Founder

The transition to Tenki was almost imperceptible. Just a quick config change and everything worked right away. I’ve been using it daily ever since.

Jonatan Dutra

Software QA Engineer

I recently moved my CI/CD pipelines to Tenki Cloud, and the difference has been remarkable. Tenki truly feels built for developers, it's intuitive, transparent, and focused on performance rather than billing complexity.

Malik Anish

Junior DevOps & Cloud Engineer

Tenki has been fantastic so far, super reliable and easy to use. I don’t have any feedback right now because everything just works, but I’ll definitely continue using it and recommend it to others.

Raphael Discky

Software Engineer

Migrating to Tenki was a breeze. It automatically opened a PR to migrate everything, and it just worked perfectly! My workflows have sped up by 2-3x!

BestCodes

Full-stack Developer

I love that Tenki runners are faster than the GitHub ubuntu-latest, and they are 1 million times faster than self-hosted ARC runners on my k3s cluster.

Sandro Marton

DevOps Engineer

I finally had the chance to dive into Tenki, and I’m really impressed. 🚀 The platform is clean, intuitive, and technically solid. Navigation feels seamless, performance is smooth, and the overall UX is highly optimized.

Riya Pathel

Frontend Developer

Thomas Sanlis

Indie Maker & Founder

Arnar Þór Sveinsson

Co-founder & CTO

Been using Tenki for a month now and it's incredible. 2x faster than github and cheaper. But the winner has been excellent support from Hayssem and the team. Highly recommended!

Daniel Donaldson

SWE Manager

We eat our own dogfood here at Luxor. The firmware team switched very early to Tenki to host our collaborative reverse-engineering tools. It's been 100% reliable.

Jan Beck

Head of Firmware

Ayush Gharat

Founder

Switching to Tenki Cloud runners took seconds and they have been consistent, fast and reliable since day one. No hidden fees and no hassle.

Chris Zeuch

Founder

The transition to Tenki was almost imperceptible. Just a quick config change and everything worked right away. I’ve been using it daily ever since.

Jonatan Dutra

Software QA Engineer

Malik Anish

Junior DevOps & Cloud Engineer

Raphael Discky

Software Engineer

Migrating to Tenki was a breeze. It automatically opened a PR to migrate everything, and it just worked perfectly! My workflows have sped up by 2-3x!

BestCodes

Full-stack Developer

I love that Tenki runners are faster than the GitHub ubuntu-latest, and they are 1 million times faster than self-hosted ARC runners on my k3s cluster.

Sandro Marton

DevOps Engineer

Riya Pathel

Frontend Developer

FAQs

Questions? Answered!

Have a question we haven't answered?
Reach out to hello@tenki.cloud

Give your agent rootwithout giving it yours.

Drive sandboxes from your code.

microVMs that boot in under 2s with isolation no container can touch.

Isolated Environments

Bring your own agent

Massive Parallelization

Per-task sandboxes

Vibe Coding

Instant Provisioning

Keep sandboxes awake, pay only when they work.

Startup

While Idle

State

Scaling

Enterprise-grade security.

Hardware-isolated microVMs

Wiped on teardown

Secrets never cross boundaries

Encrypted in transit

The Agentic Development Environment (ADE)offers another way to use Sandboxes.

Pay for what runs.Upgrade your workspace to raise limits.

Don't believe us.Believe them.

Questions? Answered!

What is a sandbox?

How fast do sandboxes start?

Is this a good fit for AI coding agents?

Can I run Docker inside a sandbox?

Can I customize the environment with my own dependencies?

How does pricing work?

How do I get started?

Give your agent root
without giving it yours.

microVMs that boot in under 2s with
isolation no container can touch.

The Agentic Development Environment (ADE)
offers another way to use Sandboxes.

Pay for what runs.
Upgrade your workspace to raise limits.

Don't believe us.
Believe them.