Home

    ---
    title: apogee-ai-sandbox
    description: Run untrusted code (or agent code) in isolated sandboxes with policy gates.
    ---

    # apogee-ai-sandbox

    > Run untrusted code (or agent code) in isolated sandboxes with policy gates.

    ## What is in this package

    | Capability | What you get |

| --- | --- | | Backends | firejail, docker, e2b, codeact | | Policy gates | network on/off, filesystem allowlist, time/CPU caps | | API | SandboxRunner.run_python(code, …) returns stdout/stderr + exit code |

    ## Install

    ```bash
    pip install apogee-ai-sandbox
    ```

    ## Where it fits

    This package is part of the [Apogee Framework](/framework/) ecosystem. It can be used:

    - **Standalone** — install and use directly via `pip` (or `npm` for `@apogee/ai-ui-react`).
    - **As a plugin** — generated projects detect it and register matching CLI subcommands automatically.

    See the [framework's modules overview](/framework/modules/overview/) for how all 28 packages fit together.

    ## Read next

    - [Installation](getting-started/installation.md)
    - [Quickstart](getting-started/quickstart.md)
    - [Reference](reference/index.md)