Give Codex, Claude Code, OpenCode, Pi and your own agents a real Linux microVM. Keep it, sleep it or throw it away — without letting one workload near another.
One clean environment for
Zero gives every agent an isolated computer with explicit resources, real persistence and an audit trail. The portal is useful; the API remains the source of truth.
Each sandbox boots its own trusted kernel boundary under Firecracker and Jailer, with dedicated disks, network identity and host-enforced resource limits.
Idle sandboxes can pause and wake transparently before terminal, exec or ingress activity. Persistent workspaces survive stop and start.
Choose a preset or set CPU, memory, workspace disk and network rate independently. Billing follows resolved resources, not a vague machine label.
Logs, metrics, state transitions and charge explanations line up around the same stable sandbox identity — even after teardown.
Agent mode permits the internet protocols coding tools need while blocking private networks, the host and neighbouring sandboxes. Air-gap with one command.
Build interactively in the portal, automate through Python, hand tools to an agent through MCP, or keep it plain with HTTPS. They all use one typed client and one authoritative API.
# One login, then the short path
sandbox login https://api.sandbox.0-uk.com
sandbox doctor
sandbox create dev
sandbox shell dev
# Inspect exactly what happened
sandbox logs dev --level error
sandbox metrics dev
sandbox billing summary --last 7dfrom sandbox_control import SandboxClient
with SandboxClient() as client:
result = client.sandboxes.create(
"dev",
project_id="PROJECT_ID",
size="medium",
wait=True,
)
output = client.sandboxes.exec(
result.sandbox.id,
["uname", "-a"],
)
print(output.stdout){
"mcpServers": {
"sandbox": {
"command": "sandbox-mcp",
"env": {
"SANDBOX_PROFILE": "default"
}
}
}
}
// Tools include sandbox_create, sandbox_exec,
// sandbox_logs, package_get and billing_explain.One Standard hour is one 2-vCPU, 4-GiB sandbox running for one hour. Package hours are shared across your organisation, not tied to individual machines.
£0/month
£10/month
£39/month
£99/month
Storage, retained snapshots and public internet egress are metered separately. Included hours do not roll over.
Agent workloads are useful precisely because they can act. Zero treats every workload as untrusted and makes the boundary visible.
Review the API contractEmail confirmation required. Private beta capacity is limited.