Axern documentation

AGENTIC EXECUTION INFRASTRUCTURE

Open-source sandboxesfor AI agents

Isolate agent-generated code with runsc. One production runtime, one resource and lifecycle model.

QuickstartGitHub ↗

LICENSEApache-2.0

HOSTINGSelf-hosted

RUNTIMErunsc

SDKPython · Go · TypeScript

Agent SandboxrunscConcurrent Runsrunsc

AXERN / AGENT SANDBOXREADY

SBX_7F2ARUNSC143 MS

$ agent.submit(code)

1. 01ENVIRONMENT REQUESTEDIMAGE PYTHON:3.12-SLIM
2. 02SANDBOX READYRUNTIME RUNSC
3. 03PROCESS STARTEDCODE RECEIVED
4. 04RESOURCES RELEASEDCLEANUP COMPLETE

ISOLATION BOUNDARYRUNSC

print("Hello Axern")

open("/host/secret")

STDOUTHello Axern

RESULTEXIT 0 / STDOUT 12 B

RUNSC BOUNDARYESCAPE ATTEMPT CONTAINED

PROC 01FS RWNET ON

01 PROVISION02 READY03 EXECUTE04 CLEAN

START WITH THE PUBLIC API

Program a sandbox with the tools you already use

The CLI and three official SDKs share the same platform capabilities. Clients do not bypass the public API with SSH or shell fallbacks.

PythonGoTypeScriptCLI

Copy

1234567891011

import os from axern_sdk import AxernClient, Sandbox client = AxernClient.from_context(    os.path.expanduser("~/.config/axern/config.json")) with Sandbox(client=client, image="docker.io/library/python:3.12-slim") as sandbox:    result = sandbox.exec("python -c 'print(42)'", check=True)    print(result.stdout)

12345678910111213

ctx := context.Background()client, _ := axern.NewClient(ctx, "127.0.0.1:25000")defer client.Close() sandbox, _ := axern.NewSandbox(axern.SandboxOptions{    Client: client,    Image: "docker.io/library/python:3.12-slim",})defer sandbox.Close(ctx) _ = sandbox.Start(ctx)result, _ := sandbox.Exec(ctx, "python -c 'print(42)'", axern.ExecOptions{Check: true})fmt.Print(result.StdoutString())

12345678910111213

import { AxernClient, Sandbox } from "@cofy-x/axern-sdk"; const config = process.env.AXERN_CONFIG  ?? process.env.HOME + "/.config/axern/config.json";const client = AxernClient.fromContext(config);const sandbox = await new Sandbox({  client,  image: "docker.io/library/python:3.12-slim",}).start(); const result = await sandbox.exec("python -c 'print(42)'", { check: true });console.log(result.stdoutText());await sandbox.close();

12

axern local upaxern run python:3.12-slim -- python -c 'print(42)'

START HERE

Find your path through the docs

One platform for isolated execution, concurrent data synthesis, and reproducible evaluation—start from the path that matches your goal.

[ QUICKSTART ]01 / 04

Run your first sandbox

Install one CLI, start the complete local stack without source code, and execute isolated code.

Start the quickstart

[ SDK ]02 / 04

Program the public API

Use the Python, Go, or TypeScript SDK—same platform capabilities as the CLI, no SSH fallbacks.

Choose an SDK

[ SELF-HOST ]03 / 04

Deploy on Kubernetes

Install the control plane, gateway, and node runtime on your own cluster with the Helm chart.

Deploy with Helm

[ OUTPUTS ]04 / 04

Deliver declared outputs

Declare bounded Run outputs, seal them before runtime cleanup, and download them with SDK verification.

Read the Run contract

BUILT IN THE OPEN

Own the execution layer, not a black box

Axern keeps the control plane, gateway, node runtime, CLI, Helm chart, and SDKs in one Apache-2.0 repository. Run the complete stack locally, inspect every contract, and contribute where your workload needs it.

Explore the repositoryContribute

PRE-1.0Ready for evaluation and contribution

Before running untrusted multi-tenant workloads, evaluate authentication, TLS, runtime isolation, image trust, network policy, quotas, and artifact retention.