- windows by dockur, 54k stars. Docker image that boots a full Microsoft desktop VM inside a container with KVM
- firecracker by firecracker-microvm, 38k stars. Rust virtual machine monitor for lightweight microVMs and sandboxes
- context-mode by mksglu, 34k stars. Local plugin that sandboxes tool output so it stays out of the agent context
- cua by trycua, 32k stars. Open-source drivers and cross-OS sandboxes for computer-use agents
- composio by ComposioHQ, 31k stars. Library of 1000+ tool integrations with auth and a sandbox for agents
- v86 by copy, 24k stars. x86 PC emulator that runs in the browser through WebAssembly
- macos by dockur, 22k stars. Docker image that boots a full Apple desktop VM inside a container with KVM
- OpenSandbox by opensandbox-group, 17k stars. Sandbox runtime for AI agents with Kubernetes support and extensible design
- memU by NevaMind-AI, 15k stars. Shared long-term memory store for AI agents with MCP and skill support
- CubeSandbox by TencentCloud, 13k stars. Fast, lightweight, concurrent sandboxes for running AI agent code
- devbox by jetify-com, 12k stars. Reproducible development environments powered by Nix
- rakazo by elie222, 8.4k stars. Open source Grok Bot alternative with your choice of model and sandbox
- sandbox-runtime by anthropics, 7.1k stars. OS-level sandbox that restricts filesystem and network access for any process
- rlm by alexzhang13, 5.8k stars. Plug-in inference library for recursive language models with sandbox support
- mxc by microsoft, 3.1k stars. Policy-driven layered isolation and containment for running workloads
- try-omarchy by omacom, 3.0k stars. Runs the Omarchy Linux setup on a Mac without manual installation
- zsvirt by ZSvirt, 2.1k stars. KVM-based cloud infrastructure engine for managing virtual machines
- dory by Augani, 1.6k stars. Local Docker, Compose, Kubernetes and VM system for macOS on Apple Silicon
- clawk by clawkwork, 1.0k stars. Runs coding agents in disposable Linux VMs isolated from the host machine
- sandboxd by tastyeffectco, 996 stars. Self-hosted AI app builder that runs agent-built apps in isolated sandboxes
- coop by trailofbits, 816 stars. Runs Claude Code and Codex inside isolated Lima or Firecracker VMs
- coi by coipond, 787 stars. Gives each AI coding agent its own isolated machine with Docker and systemd
- agentbox by madarco, 582 stars. CLI that runs several coding agents in parallel in sandboxed VMs
- superserve by superserve-ai, 512 stars. Sandbox infrastructure where AI agents run code in isolated environments
- virtio-nvgpu by nestrilabs, 460 stars. Virtio device that shares one NVIDIA GPU among several virtual machines
- PermissionFlow by jaywcjlove, 440 stars. Swift library that walks users through macOS permission setup
- quicksand by microsoft, 411 stars. Lightweight sandbox that isolates AI agent code execution
- pullrun by pullrun, 134 stars. Runtime that boots OCI images as microVMs or containers in about 400 ms
- clampdown by 89luca89, 131 stars. Runs AI coding agents inside hardened Docker or container sandboxes
- mezz by ABGEO, 83 stars. Docker-based Wi-Fi access point sandbox for inspecting your own IoT devices
- Z-Jail by Division-36, 73 stars. Layered Linux sandbox using namespaces, seccomp, and capability dropping
- OpenClawMachines by mathaix, 63 stars. Go service providing compute isolation, tool integration and auth for OpenClaw teams
New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter