Open-source sandboxes for AI agents and code execution.

pandastack-io / pandastack-ai

Open-source sandboxes for AI agents and code execution.

PandaStack

Open-source Firecracker microVM sandboxes and managed PostgreSQL, self-hosted.

60-second quickstart

git clone https://github.com/pandastack-io/pandastack-ai
cd pandastack-ai
bash scripts/mac-local-e2e.sh
open http://localhost:3000

Create a sandbox from the local API:

curl -sS http://localhost:8080/v1/sandboxes \
  -H 'Authorization: Bearer pds_local_dev_token' \
  -H 'Content-Type: application/json' \
  -d '{"template":"base"}'

Exec a command in it:

curl -sS http://localhost:8080/v1/sandboxes/<id>/exec \
  -H 'Authorization: Bearer pds_local_dev_token' \
  -H 'Content-Type: application/json' \
  -d '{"cmd":"echo","args":["hello"]}'

What it does

PandaStack is two things on one control plane: disposable Firecracker microVM sandboxes for AI agents and untrusted code, and managed PostgreSQL 16 instances that run in microVMs of their own.

• Firecracker microVM sandboxes with strong process and kernel isolation.
• Managed PostgreSQL 16 databases (Beta) — a real, durable database in its own microVM, with a native postgres:// URL in seconds, continuous WAL archiving, and restore-based failover onto a healthy…

View on GitHub