SPACE (Sandboxed Platform for Agentic Code Execution) is the sandbox platform Perplexity built to run code for its Computer agent, released as open source under the Apache-2.0 license on October 15, 2026. Each sandbox is a Firecracker microVM with its own Linux guest and writable filesystem, created from a template. Applications drive it over an HTTP API with server-sent events: create a sandbox, start command sessions, stream output and exit codes, and pause, suspend, resume or delete the sandbox. It is written mainly in Rust, but you do not need a Rust library to use it.
The design treats the sandbox as untrusted. Network egress and platform-held credentials are managed outside the guest, so an agent can reach authorized services without the secret being stored inside its workspace. Snapshots and checkpoints of the running environment let work resume after interruptions or branch into separate copies. Perplexity says SPACE has run all Computer sessions since July 2026 and handles millions of sandbox creations per day; it also published a security evaluation in which agents found no VM escape in 108 attempts; some agents found ways around network restrictions. These are vendor-reported figures.
SPACE is infrastructure you operate yourself, not a hosted service. The documented install deploys it into a local Kind (Kubernetes) cluster on an apt-based Linux x86_64 host with KVM and nested virtualization; it does not run directly on macOS. Version 0.8.0 is the public baseline, with 0.9.0 planned as the last breaking release before stable 1.0 contracts. An E2B Compatibility Wrapper lets existing E2B Python SDK clients (tested with e2b 2.21.1) use SPACE as their backend, and metrics and traces go to your own Datadog or OpenTelemetry endpoint, or nowhere if none is configured. Akamai, Crusoe and CoreWeave have announced offerings or setup guides for running SPACE.
SPACE suits platform teams that need self-hosted, microVM-isolated execution for agents or user code and want credential and egress control outside the sandbox. Teams that want a managed, pay-as-you-go sandbox API without running Kubernetes and KVM hosts will find hosted options such as E2B or Vercel Sandbox simpler.
