Changelog

Remote Sandboxes

Remote Sandboxes run the code your product executes for a customer, like an agent's tool calls or a user's script, in sandboxes inside the customer's own cloud. Your product stays hosted. Only the sandboxes run there.

alien projects capabilities enable remote-sandbox --max-session-lifetime-seconds 3600
alien api-keys create --for remote-sandbox --description production

Your backend calls the Sandbox Gateway at https://sandbox.alien.dev and names the customer by the ID you already know them by. The customer's admin connects their account once through a setup link with the sandbox item.

Sandboxes run on AWS, Google Cloud, and Azure. Without an image, they use Alien's default image, which ships a general agent toolchain. To use your own:

alien projects capabilities enable remote-sandbox --image public.ecr.aws/acme/analysis:v1
alien projects capabilities enable remote-sandbox --src ./sandbox
  • --src: builds a Dockerfile and pushes it to the project's private repository on each cloud
  • New images reach existing customers: no need to rerun initial setup when you change the image
  • Logs and usage: Remote Sandbox requests show up in alien logs and in project usage

Read the docs →