Skip to the collection

agent-native · Code Execution · Verified 2026-09-26

Axern

Listed on The Agent-Native Index

Axern is an open-source sandbox platform for AI agents

What it does

Axern is a self-hosted execution control plane built around agent sandboxes. It runs untrusted, agent-generated code behind the runsc boundary and trusted long-lived services through runc, while exposing the same lifecycle model for environments, processes, files, archives, storage, services, functions, tunnels, terminals, and computer use.

Its durable control plane stores intent, placement, leases, retries, health, cleanup, quota, and storage state in PostgreSQL. Axrun adds reproducible agent tasks: immutable TaskSets and rollout plans, leased workers, resource and budget admission, verifier/oracle phases, trajectories, usage, and content-addressed evidence.

Production warning: upstream explicitly says Axern is pre-1.0 and suitable for evaluation/contribution. The bundled PostgreSQL, MinIO, single-node settings, and generated local credentials are development defaults. Before any shared or multi-tenant deployment, operators must harden authentication, TLS, network policy, runtime isolation, image trust, secrets, quotas, and persistent storage. Upstream also does not publish a sub-second cold-start guarantee; benchmark the chosen topology for interactive agent workloads.


Agent-facing interfaces

How agents onboard

Interaction pattern: self-hosted control plane + CLI / SDK

brew install cofy-x/tap/axern
axern local up
axern run python:3.12-slim -- python -c 'print("hello from axern")'
axern run list

See the full onboarding section in the dossier.

Protocol surface

Interface Detail
CLI axern for local stack, resources, identity, contexts, runs, agents, services, and administration; JSON-capable output
Python SDK axern-sdk, sync + async sandbox API; agent tooling, browser/computer use, functions, environments, and services
Go SDK Versioned Go module for sandbox operations, controllers, rollout control, and task assets
TypeScript SDK @cofy-x/axern-sdk, Promise-native sandbox/process/file/tunnel API
Wire protocol Public gRPC contracts shared by CLI/SDK; gateway also provides HTTP, SSH, terminal, service, and tunnel edges
Axrun CLI NDJSON streaming for plan/start/run/watch, stable terminal exit codes, rollout inspection/comparison, and checksum-verified artifact downloads
Deployment Docker Compose local stack or cloud-neutral Kubernetes Helm chart

Verification

Last verified 2026-09-26.

Sources: