Step-by-step guides for running AI agents on their own computers: coding agents, secrets and egress, always-on assistants, teams and the EU. https://sanbox.cloud/kb/ 2026-11-06T00:00:00Z Sanlabs GmbH https://sanbox.cloud/ https://sanbox.cloud/kb/teams/forward-deployed-engineering/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Yes. Sanlabs' forward-deployed engineers build AI agent use cases with your team on Sanbox, with experience in aviation, pharma, supply chain and logistics, and internal admin.

https://sanbox.cloud/de/kb/teams/forward-deployed-engineering/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Ja. Die Forward-Deployed Engineers der Sanlabs GmbH bauen KI-Agenten mit Ihrem Team auf Sanbox, mit Erfahrung in Luftfahrt, Pharma, Lieferkette und Logistik sowie interner Verwaltung.

https://sanbox.cloud/compare/best-eu-hosted-sandboxes-for-ai-agents-2026/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Eight ways to run AI agent sandboxes in the EU, compared by contracting company, location, persistence, DPA and price, including where each is stronger.

https://sanbox.cloud/kb/automation/call-a-sanbox-computer-from-n8n/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

A native Sanbox node for n8n is enabled per organisation on request. Today, self-hosted n8n runs the Sanbox CLI from its Execute Command node, and Make or Zapier can call that workflow.

https://sanbox.cloud/kb/security/agent-own-computer-not-ssh-to-production/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Don't give a coding agent a shell on production. Give it a Computer with staging-only credentials, deny-by-default egress and a snapshot, and review its diff before you deploy.

https://sanbox.cloud/kb/build/one-persistent-computer-per-user/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Create one template for your product and one Sanbox Computer per user, keyed by your user ID. Stop it when they leave, resume it when they return, and use warm pools for fast first starts.

https://sanbox.cloud/kb/teams/agent-computer-for-every-employee/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Build one team template with a network policy and secret proxies, then start one persistent Sanbox Computer per person with a stable external run ID. Enterprise adds SSO.

https://sanbox.cloud/kb/browser/keep-an-agents-browser-logged-in/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Keep the browser profile on a disk that outlives each session and log in once yourself. A Sanbox Browser Computer keeps cookies and signed-in sessions across stop and resume.

https://sanbox.cloud/kb/coding-agents/claude-code-24-7-from-your-phone/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Run Claude Code on a machine that stays on, in a terminal session that survives disconnects, and reach it from your phone with Remote Control or a browser terminal.

https://sanbox.cloud/kb/parallel-work/run-coding-agent-tasks-in-parallel/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Give each task its own machine. sanbox batch runs every task in a JSON file in its own isolated Sanbox run, so tasks never share files, ports or databases.

https://sanbox.cloud/kb/always-on-agents/mac-mini-vs-vps-vs-cloud-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Over 12 months a small VPS is cheapest and a Mac mini pays off only over years or for macOS. A managed agent computer adds isolation, snapshots and no server to run.

https://sanbox.cloud/kb/agent-computers/what-is-an-agent-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

An agent computer is a persistent, isolated machine that an AI agent owns. It differs from a short-lived code sandbox and from a VPS that you run and maintain yourself.

https://sanbox.cloud/kb/eu/where-do-agent-model-calls-go/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

To the provider and endpoint you configure. Claude via Bedrock or Google Cloud, OpenAI or Azure OpenAI with EU residency, and Mistral's EU endpoint keep inference in Europe; the exact scope differs by route.

https://sanbox.cloud/kb/errors/why-cant-my-agent-reach-a-website/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Sanbox Computers block outbound traffic by default. A blocked request names the host it couldn't reach: add that host and port to the template's network policy and start a new run.

https://sanbox.cloud/de/kb/eu/wohin-gehen-die-modellaufrufe-meines-agenten/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Zu dem Anbieter und Endpunkt, den Sie konfigurieren. Claude über Bedrock oder Google Cloud, OpenAI oder Azure OpenAI mit EU-Datenresidenz und Mistrals EU-Endpunkt halten die Inferenz in Europa, je nach Weg mit anderem Umfang.

https://sanbox.cloud/de/kb/eu/avv-fuer-ki-agenten/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Meist ja. Verarbeiten KI-Agenten personenbezogene Daten auf der Infrastruktur oder mit dem Modell eines Anbieters, verlangt Art. 28 DSGVO in der Regel einen AVV, auch mit dem Modellanbieter.

https://sanbox.cloud/kb/teams/agents-that-write-word-excel-and-pdf/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Yes. A Sanbox OpenCode Computer ships LibreOffice Writer and Calc, pandoc, python-docx, openpyxl, xlsxwriter and reportlab, so an agent can write .docx, .xlsx and .pdf files you download.

https://sanbox.cloud/kb/browser/watch-and-take-over-your-agents-browser/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Yes. A Sanbox Browser Computer shows the agent's chat beside its live browser in the console. You can watch each step and take control to complete a sign-in or verification step yourself, then hand back.

https://sanbox.cloud/kb/eu/dpa-for-ai-agents/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Usually, yes. If an AI agent processes personal data on a vendor's infrastructure or model, Article 28 GDPR normally requires a DPA with each such vendor, including the model provider.

https://sanbox.cloud/kb/security/api-keys-your-agent-cannot-see/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Keep the key off the agent's machine. A Secret Proxy stores it and adds it to matching HTTPS requests on the way out, so the agent can call the API but never read the key.

https://sanbox.cloud/kb/build/warm-pools-and-snapshot-templates/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Prepare a Computer once, snapshot it, and keep a warm pool of ready copies, so a new Computer can start in under a second. Snapshot templates let you promote or roll back.

https://sanbox.cloud/kb/coding-agents/claude-code-on-a-cloud-computer-that-keeps-files/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Install Claude Code on a cloud machine whose disk outlives each session. A Sanbox Computer keeps your repository, installed packages and Claude Code settings across stop and resume.

https://sanbox.cloud/kb/always-on-agents/hermes-agent-in-the-cloud/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Create a Sanbox Hermes Computer template with the email and Telegram channels, then start one always-on run with an AgentMail address and your Telegram bot. Memory and skills stay on its disk.

https://sanbox.cloud/kb/parallel-work/fork-a-computer-to-try-several-approaches/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Get one Computer to the starting point, stop it, and fork it three times. Each fork is an independent copy with the same files and packages, so three ideas can run without touching the original.

https://sanbox.cloud/kb/agent-computers/persistent-vs-ephemeral-sandboxes/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Use an ephemeral sandbox for one-shot code execution. Use a persistent computer when the agent must keep files, packages, browser logins or services between sessions.

https://sanbox.cloud/compare/sanbox-vs-e2b/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

E2B gives agents SDK-driven Firecracker sandboxes, billed per second. Sanbox gives each agent a persistent Computer that stays on until stopped, in EU data centres, for a flat plan.

https://sanbox.cloud/kb/security/restrict-which-domains-an-agent-can-reach/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Use a deny-by-default egress allowlist. On Sanbox, a template's network policy lists the hosts and ports its Computers may reach; a blocked request names the host.

https://sanbox.cloud/kb/parallel-work/docker-compose-inside-an-agent-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Use a Sanbox Docker Computer: a microVM with its own Docker Engine, Compose and Buildx. Allow your registries, copy the project in, and run docker compose through sanbox exec.

https://sanbox.cloud/kb/coding-agents/codex-on-an-always-on-linux-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Install the Codex CLI on a Linux machine that stays on, sign in with a device code or API key, and run it in a terminal session that survives disconnects, for example on a Sanbox Computer.

https://sanbox.cloud/kb/build/bring-your-own-model-endpoint/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Add the endpoint as a Custom OpenAI Proxy with sanbox model-providers create, then build templates on it. Any OpenAI-compatible URL works, such as an Azure OpenAI EU Data Zone deployment.

https://sanbox.cloud/compare/sanbox-vs-daytona/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Daytona offers container, Linux VM, Windows, macOS and GPU sandboxes with five SDKs and per-second pricing. Sanbox gives each agent a persistent microVM Computer in EU data centres for a flat plan.

https://sanbox.cloud/kb/teams/trigger-an-agent-from-slack-teams-or-whatsapp/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Sanbox connects agent Computers to Slack, Microsoft Teams and WhatsApp, enabled per organisation on request. Email and Telegram work today through Hermes Computers.

https://sanbox.cloud/kb/agent-computers/what-survives-a-stop/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

On Sanbox, a stop keeps the disk: /workspace, installed packages, Docker images and the browser profile. RAM, running processes, connections and exec commands end.

https://sanbox.cloud/kb/always-on-agents/where-to-host-openclaw/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

OpenClaw's docs say to use a VPS for 24/7 reliability and a Mac only for iMessage or macOS tools. A one-click OpenClaw Computer on Sanbox is enabled on request.

https://sanbox.cloud/kb/agent-computers/container-microvm-or-vm-for-coding-agents/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Containers share the host kernel. MicroVMs such as Firecracker give each workload its own kernel behind hardware virtualisation. Full VMs do too, with more weight.

https://sanbox.cloud/compare/docker-sandboxes-vs-a-persistent-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Docker Sandboxes run coding agents in a microVM on your machine for free, or in Docker's cloud with a one-hour default expiry. A persistent cloud computer runs until you stop it.

https://sanbox.cloud/kb/always-on-agents/give-your-agent-a-phone-number/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Sanbox gives an agent its own phone number, so people can reach it by text message. It's enabled per organisation on request. Today, Hermes Computers take email and Telegram.

https://sanbox.cloud/kb/build/supabase-users-get-a-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Connect your Supabase project to Sanbox once, then create a Hermes Computer per user with their Supabase Auth ID. The user approves access, and every read runs as them under your RLS policies.

https://sanbox.cloud/kb/parallel-work/preview-your-agents-dev-server/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Allow the dev server's port on the Computer's template, then run sanbox ports forward to open it on your own machine. HTTP and SSE work; WebSockets, and so hot reload, don't.

https://sanbox.cloud/kb/coding-agents/opencode-server-on-a-remote-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Run opencode serve on a machine that stays on and connect with the OpenCode SDK. A Sanbox OpenCode Computer runs the server privately and gives your app a short-lived URL and token.

https://sanbox.cloud/kb/security/snapshot-before-skip-permissions/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Run it in a disposable Computer: snapshot the stopped Computer, run Claude Code with --dangerously-skip-permissions, review the diff, and start fresh from the snapshot if needed.

https://sanbox.cloud/kb/teams/spend-caps-per-computer-and-team/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Sanbox shows and caps spend per Computer and per team, enabled per organisation on request. Today, hosting is agreed per organisation and your model provider's limits apply.

https://sanbox.cloud/compare/claude-code-on-the-web-vs-your-own-cloud-computer/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Claude Code on the web runs each session in a fresh Anthropic VM cloned from GitHub, included in your Claude plan. Your own cloud computer keeps its disk, services and tools, and runs any agent.

https://sanbox.cloud/kb/coding-agents/log-in-to-claude-code-or-codex-on-a-headless-machine/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Claude Code: paste the sign-in code back, use a claude setup-token token, or an API key. Codex: codex login --device-auth or an API key. Plus where each stores the login.

https://sanbox.cloud/kb/parallel-work/schedule-a-recurring-agent-job/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

Sanbox starts your agent at the times you choose, with no laptop or server of yours involved. Scheduled runs are enabled per organisation on request; today, any scheduler can call the CLI.

https://sanbox.cloud/kb/build/sanbox-mcp-server/ 2026-11-06T00:00:00Z 2026-11-06T00:00:00Z

The Sanbox MCP server lets Claude, ChatGPT, Cursor and other MCP clients start and use Sanbox Computers as tools. It's enabled on request; today, agents with a shell use the Sanbox CLI.