SandboxAPI — Code Execution API for AI Agents

12 languages. gVisor isolation. Stateful sessions. Package install. Streaming, async, webhooks, multi-file. MCP-native.

Current API version: 3.4.0 · Base URL via RapidAPI: https://sandboxapi.p.rapidapi.com · Direct: https://api.sandboxapi.dev

Quick Start #

Synchronous execution #

curl -X POST https://sandboxapi.p.rapidapi.com/v1/execute \
  -H "Content-Type: application/json" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: sandboxapi.p.rapidapi.com" \
  -d '{"language":"python3","code":"print(\"Hello, World!\")"}'

Response:

{
  "id": "exec_abc123",
  "status": "completed",
  "language": "python3",
  "stdout": "Hello, World!\n",
  "stderr": "",
  "exit_code": 0,
  "exit_signal": 0,
  "execution_time_ms": 42,
  "wall_time_ms": 58,
  "memory_used_kb": 8192
}

Stateful session 3.2.0 #

Sessions hold a sandbox open between calls. Variables, files, and installed packages persist for the session's idle TTL (max 30 minutes).

# 1. Create a session
curl -X POST https://sandboxapi.p.rapidapi.com/v1/sessions \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"language":"python3","idle_ttl":300}'
# → {"id":"sess_abc","language":"python3","expires_at":"..."}

# 2. Execute — sets a variable
curl -X POST https://sandboxapi.p.rapidapi.com/v1/sessions/sess_abc/execute \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"code":"x = 42"}'

# 3. Execute again — variable persists
curl -X POST https://sandboxapi.p.rapidapi.com/v1/sessions/sess_abc/execute \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"code":"print(x * 2)"}'
# → stdout: "84\n"

Package installation in a session 3.3.0 #

curl -X POST https://sandboxapi.p.rapidapi.com/v1/sessions/sess_abc/install \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"manager":"pip","packages":["pandas","numpy"]}'

Supported managers: pip, npm, gem, cargo. Top-1k packages per language are cached for sub-3s installs.

Streaming output 3.1.0 #

curl -N -X POST https://sandboxapi.p.rapidapi.com/v1/execute/stream \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"language":"python3","code":"for i in range(5):\n  print(i); import time; time.sleep(1)"}'
# → SSE events: stdout, stdout, ..., result

Events use the standard SSE format. The terminal event has event: result with a JSON payload that includes exit_code, execution_time_ms, and memory_used_kb.

Async + webhook 3.1.0 #

curl -X POST "https://sandboxapi.p.rapidapi.com/v1/execute?async=true" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{"language":"python3","code":"...","callback_url":"https://your.app/hook"}'
# → {"token":"job_xyz","status":"queued"}

# Either poll:
curl https://sandboxapi.p.rapidapi.com/v1/executions/job_xyz \
  -H "X-RapidAPI-Key: YOUR_API_KEY"

# Or wait for the signed PUT to your callback_url.
# Verify the X-SandboxAPI-Signature: sha256=... header.

Multi-file programs 3.0.0 #

# Base64-encode a ZIP of source files, optionally with a compile script and run script.
curl -X POST https://sandboxapi.p.rapidapi.com/v1/execute \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{
    "language":"cpp",
    "additional_files":"<base64 zip>",
    "compile_script":"g++ -O2 *.cpp -o main",
    "run_script":"./main"
  }'

Output verification 3.0.0 #

curl -X POST https://sandboxapi.p.rapidapi.com/v1/execute \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -d '{
    "language":"python3",
    "code":"print(2+2)",
    "expected_output":"5\n"
  }'
# → status: "wrong_answer"

Supported Languages #

Request Parameters #

Response Fields #

Error Handling #

SandboxAPI distinguishes between API errors (HTTP 4xx/5xx) and execution errors (HTTP 200 with a status field). Treat any HTTP 200 response as a successful API call — the status tells you whether the user's code ran cleanly.

Pricing & Rate Limits #

All plans include gVisor isolation, 12 languages, stdin, multi-file, output verification, and webhooks where the mode supports it. See pricing for full details.

Security #

Every execution runs inside an OCI container backed by gVisor (runsc) — a user-space kernel that intercepts syscalls before they reach the host. Combined with strict resource limits, no network egress (default), no persistent storage, and per-request cleanup, this gives you a strictly stronger isolation boundary than container-only sandboxes like raw Docker or Kubernetes.

• gVisor (runsc) wraps every container; user-space syscall filter blocks risky calls before the host kernel sees them.
• Resource limits (CPU, memory, PIDs, file descriptors, disk) are enforced by cgroups and seccomp.
• Network egress is disabled by default and gated by a per-request allowlist proxy in sessions.
• Webhook callbacks are signed with HMAC-SHA256 using a secret derived from your API key. Verify the X-SandboxAPI-Signature header.
• Synchronous executions retain no data. Async results live for 24h. Session state expires at the idle TTL (max 30 min).

MCP Server #

SandboxAPI is available as an MCP server at https://mcp.sandboxapi.dev/mcp with 11 tools: execute_code, execute_batch, list_languages, create_session, session_execute, session_close, session_install_packages, execute_async, get_execution, execute_with_expected, get_capabilities.

Add to Claude Desktop / Cursor / VS Code:

{
  "mcpServers": {
    "sandboxapi": {
      "url": "https://mcp.sandboxapi.dev/mcp",
      "headers": { "Authorization": "Bearer YOUR_API_KEY" }
    }
  }
}

Full integration guide on the MCP page.

Code Examples #

Python (requests)

import requests

resp = requests.post(
    "https://sandboxapi.p.rapidapi.com/v1/execute",
    headers={
        "X-RapidAPI-Key": "YOUR_API_KEY",
        "X-RapidAPI-Host": "sandboxapi.p.rapidapi.com",
    },
    json={"language": "python3", "code": "print(2 + 2)"},
)
data = resp.json()
print(data["stdout"])  # → "4\n"

JavaScript (fetch)

const resp = await fetch("https://sandboxapi.p.rapidapi.com/v1/execute", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-RapidAPI-Key": "YOUR_API_KEY",
    "X-RapidAPI-Host": "sandboxapi.p.rapidapi.com",
  },
  body: JSON.stringify({ language: "javascript", code: "console.log(2 + 2)" }),
});
const data = await resp.json();
console.log(data.stdout); // → "4\n"

Go

req, _ := http.NewRequest("POST", "https://sandboxapi.p.rapidapi.com/v1/execute",
  strings.NewReader(`{"language":"go","code":"package main\nimport \"fmt\"\nfunc main(){fmt.Println(2+2)}"}`))
req.Header.Set("X-RapidAPI-Key", "YOUR_API_KEY")
req.Header.Set("Content-Type", "application/json")
resp, _ := http.DefaultClient.Do(req)
defer resp.Body.Close()

Changelog #

Read the full release-by-release changelog →