Iniciar sessão
Microsoft Execution Containers logo

Microsoft Execution Containers

Ativo

Microsoft's open-source, policy-driven containment layer for AI agents and untrusted code

Visitar siteComparar
Condicional

Microsoft Execution Containers is a free, MIT-licensed containment layer: you declare in one JSON policy what an agent may touch, and a process, session, WSL or microVM backend enforces it on Windows 11, macOS and Linux. Conditional because the microVM backend is experimental, the session and WSL backends run only on Windows 11, and Claude Code support is only planned. The evidence we read is Microsoft's own announcement and repository, with no independent security assessment. It suits teams embedding agents in products.

Com IA

Containment runtime that hosts third-party agents under a JSON policy; it runs no model itself.

É adequada para ti?

Bom para

  • Declaring an agent's file, network, process and UI boundaries once in a JSON policy and enforcing it across Windows 11, macOS and Linux
  • Finding out what an agent needs before locking it down: Learning mode blocks and records ungranted access in JSON reports
  • Embedding containment in your own product through SDKs for Rust, .NET and Node.js under an MIT license
  • Windows 11 setups that want a separate desktop and clipboard (session container) or a Linux environment (WSL container)

Não recomendado para

  • Hardware-backed isolation you can rely on today: the microVM backend is marked experimental
  • Session or WSL containers on macOS or Linux: those backends are Windows 11 only
  • Running Claude Code, Box, Egnyte, Perplexity or Raycast under MXC today: Microsoft lists them as planned, not shipped
  • Judging isolation strength independently: the pages we read hold no third-party security assessment

A nossa experiência

We haven't tested Microsoft Execution Containers ourselves. This profile is based on public documentation, user reviews, and community feedback.

Preços

Código aberto
Open source (MIT)$0
  • MIT license per the repository
  • SDKs: Rust, .NET, Node.js
  • No paid tier named on the pages we read
Ver preços completos

Ainda sem alterações de veredicto

O relógio começa a contar no primeiro dia: as alterações aparecem aqui à medida que o nosso veredicto evolui.

Fontes

Registo de verificação

  • Perfil· Sem alterações

    Agente automatizado

Como avaliamos

Quer isto a funcionar na sua empresa?

Testámos esta ferramenta e construímos com ferramentas assim todos os dias. Diga-nos o fluxo de trabalho e nós instalamos, integramos e entregamos a funcionar.

Diga-nos o que precisa (abre num novo separador)Veja o que construímos

A conversa funciona com Gnosari, uma das ferramentas deste diretório. Uma conversa real, não um guião de vendas.