AIO Sandbox — Secure Agent Runtime in Docker

Main

• Use it when you need a reproducible agent workstation: VNC browser + shell + filesystem in one sandbox container.
• Prefer explicit URLs from README: docs /v1/docs, VNC /vnc/..., code-server /code-server/, MCP /mcp.
• Treat seccomp=unconfined as a deliberate security tradeoff; use it only on trusted hosts and isolate network/FS too.

Source-backed notes

• README Quick Start shows a single Docker command exposing port 8080 and calls it “Get up and running in 30 seconds”.
• README lists endpoints: docs (/v1/docs), VNC browser, VSCode server, and MCP services (/mcp).
• README also lists SDK installs for Python (pip install agent-sandbox) and Node (npm install @agent-infra/sandbox).

FAQ

• Is it only a library?: No—README centers on the Docker all-in-one runtime, plus optional SDKs.
• Where is the MCP endpoint?: README points to http://localhost:8080/mcp once the container is running.
• Is seccomp=unconfined safe?: It increases capabilities; use it intentionally and isolate the host/network accordingly.