microsoft/mxc
Policy-driven, layered isolation and containment observed · 2026-09-03
Health v2 · maintenance only
69/100
- Activity 100
- Release rhythm 60
- Longevity 14
Flags: prerelease_only
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 40.5
- age_days: 208
- days_rel: 11
- days_push: 0
- n_releases_24m: 3
Adoption not part of the score
1280 stars · 65 forks observed · 2026-09-03
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
MXC (Microsoft eXecution Container) is a sandboxed code execution system for safely running untrusted code such as model output, plugins, and tools across Windows, Linux, and macOS. It offers multiple containment backends (process sandboxes, LXC, Bubblewrap, Seatbelt, microVMs, Hyperlight) behind a unified JSON configuration schema and a TypeScript SDK.
Use cases
- run untrusted LLM-generated code safely
- sandbox plugin and tool execution
- execute agent tool calls in an isolated environment
- run untrusted code in a VM or process sandbox
- enforce filesystem and network policies for code execution
- build AI agent code execution with sandboxing
When to choose
- you need cross-platform sandboxing of untrusted code with a unified config schema
- you want pluggable containment backends from lightweight process isolation to full VMs
- you are building AI agents that execute model-generated code and need a TypeScript SDK
When to avoid
- you need hardened, production-grade security boundaries today - the project explicitly states no profiles should be treated as security boundaries yet
- you need a stable, mature sandboxing solution rather than an early preview
- you only target platforms or backends not covered by MXC
Facets
library · maturity experimental
security sdk configuration-management developer-tools security developer-tools cross-platform windows rust sandbox code-execution untrusted-code containment microvm policy-driven microsoft sandboxing linux macos typescript
1 source
- readme: https://github.com/microsoft/mxc · fetched 2026-09-03 · bc01efa5b3c5
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| microsoft/mxc | main | 69 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem