CreateOS Sandbox Examples
Show me it running my use case. Every example below is a complete, runnable program in the SDK repo: spin up a Firecracker micro-VM, do the thing, tear it down. Run untrusted code, fork agent state for parallel rollouts, network sandboxes together, fan out across many, or self-host the whole worker.
Start Here
The demos that show what only CreateOS Sandbox does: isolation, networking, fork, fan-out, and self-host.
AI code agent
Use a sandbox as the code-execution environment for a Claude agent.
Filesystem snapshots
Snapshot/branch a sandbox: pause, fork, resume the clone.
Radicle multi-agent
Three networked sandboxes running a Radicle p2p git mesh with role-specialized agents.
Analyze data with AI
Upload a CSV, have Claude write the analysis from its schema, read back the chart.
Batch inference fan-out
Shard a classification job across many sandboxes in parallel.
Self-hosted agent worker
Back a Claude Managed Agent with one persistent VM for tool execution.
Core and Lifecycle
Create, run, snapshot, pause, and fork: the primitives every workload is built on.
Hello world
Smoke test: create a sandbox, run one buffered command, destroy it.
Code interpreter
Upload a Python script, run it, capture stdout/stderr. Includes a streaming variant.
Dev server preview URL
Bind an HTTP server and reach it via a per-sandbox ingress preview URL.
Filesystem snapshots
Snapshot/branch a sandbox: pause, fork, resume the clone.
All-in-one tour
All-in-one tour exercising every core primitive in one run.
Bandwidth recharge
Read a sandbox's bandwidth quota and grow it after create with rechargeBandwidth (create no longer accepts bandwidth_quota_bytes).
Idle auto-pause
Set an idle auto-pause timeout at create with auto_pause_after_seconds and change it live with setAutoPause(seconds | null) so an idle sandbox stops billing.
AI Agents and Frameworks
Drive agents and agent frameworks whose code runs inside an isolated VM.
AI code agent
Use a sandbox as the code-execution environment for a Claude agent.
OpenAI Agents tools
Expose sandbox operations as tools to the OpenAI Agents SDK.
MCP: Claude Code
Run the Claude Code CLI inside a sandbox.
LlamaIndex RAG
Build a LlamaIndex vector index; persist it across pause/resume.
ACP hello world
Run an Agent Client Protocol agent in a sandbox over JSON-RPC.
Google ADK agent
Drive a Google ADK agent whose tools run inside a VM.
LangGraph orchestrator
Model sandbox operations as LangGraph nodes with an OpenAI LLM.
OpenAI Codex CLI
Run the OpenAI Codex CLI in a sandbox to execute a task.
Claude changelog generator
Clone a public git repo inside a sandbox, run the commit log through the Claude Messages API, and download the generated CHANGELOG.md.
Claude agent GitHub wiki Q&A
Clone a public GitHub repo into a sandbox and run a Claude tool-use agent that reads the file tree to answer questions about the codebase.
Mastra agent in a sandbox
Install the Mastra TypeScript agent framework inside a createos-sandbox VM, upload an agent script, run it against an OpenAI-compatible provider, and capture the response.
Effective agent patterns
Run three LLM agent patterns (prompt-chaining, routing, parallelization) using the Vercel AI SDK inside a createos-sandbox sandbox, with an OpenAI-compatible model proxy.
Networking and Scale
Multiple sandboxes on a private network, and fan-out across many at once.
Radicle multi-agent
Three networked sandboxes running a Radicle p2p git mesh with role-specialized agents.
Batch inference fan-out
Shard a classification job across many sandboxes in parallel.
Dev Servers and Environments
Long-lived services and dev environments reached over a per-sandbox ingress URL.
Dev server + git preview
Clone a repo, start a dev server, expose it via a live ingress URL.
Jupyter singleton kernel
Keep a persistent Python kernel over a socket; pause and fork two branches.
Text embeddings server
Serve a CPU embeddings model as a long-lived service over ingress.
Astro in a sandbox
Scaffold an Astro site, run `astro dev`, reach it via ingress.
OpenCode server
Run the OpenCode headless HTTP server over ingress.
Prometheus Pushgateway
Run a Prometheus Pushgateway, push a metric, scrape it via ingress.
FastAPI app
Serve a FastAPI app over ingress and verify its routes.
code-server (VS Code)
Run code-server (VS Code in the browser) over ingress.
Headless Chromium DevTools
Run headless Chrome with the CDP port exposed via ingress.
OpenClaw gateway
Run the OpenClaw gateway over ingress and verify /v1/models.
Browser and Scraping
Headless browsers and crawlers running inside the isolation boundary.
MCP: Browserbase
Run the Browserbase MCP server in a sandbox, driven by Claude.
Firecrawl scrape + analyze
Scrape pages with Firecrawl, have Claude write analysis code, run it, pull the chart.
Playwright headless browser
Run Playwright + headless Chromium to scrape and extract the DOM.
Crawl4AI web crawler
Install Crawl4AI and Playwright/Chromium inside a VM, crawl a public URL to Markdown, download the output to the host.
Data, Files, and Storage
Bring your own storage, custom images, and file-in file-out data jobs.
Docker custom template
Build a custom rootfs template from a Dockerfile, then run containers inside the VM.
TigerFS + Postgres
Run PostgreSQL on a TigerFS filesystem layer in one VM.
Analyze data with AI
Upload a CSV, have Claude write the analysis from its schema, read back the chart.
S3 bucket query
Query a public S3 bucket via DuckDB httpfs inside a sandbox.
Git clone + TypeScript LSP
Clone a TS repo and drive typescript-language-server over stdio.
S3-disk ffmpeg transcode
Register an S3-backed disk, mount at boot, transcode with ffmpeg, detach, destroy.
Python PDF form extractor
Upload a fillable PDF into a sandbox, pip-install PyMuPDF, extract every form-field name and value to JSON, and download the result, no external API required.
Python doc to Markdown converter
Upload a local document (HTML, DOCX, PDF, …) into a createos-sandbox sandbox, convert it to Markdown with Microsoft MarkItDown (pip-installed inside the guest), and download the result.
Self-Host
Back agents with VMs you run in your own boundary.
Run your use case in an isolated micro-VM.
Grab 500 free credits and run any example in minutes, or book a design-partner call.