# microsoft/mxc

Policy-driven, layered isolation and containment

Repository: https://github.com/microsoft/mxc
Canonical: https://ross.abutalabs.com/products/mxc
Language: Rust
License: MIT
License Family: permissive
Last push: 2026-09-03T02:04:52+00:00

## Health v2 (maintenance only)
Score: 69/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 100, release rhythm 60, longevity 14
- inputs: {"age_days": 208, "days_push": 0, "days_rel": 11, "gap_med": 40.5, "n_releases_24m": 3}
- flags: prerelease_only
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1280, forks 65 (observed 2026-09-03T02:15:15.026953+00:00)

## What it is
MXC (Microsoft eXecution Container) is a sandboxed code execution system for safely running untrusted code such as model output, plugins, and tools across Windows, Linux, and macOS. It offers multiple containment backends (process sandboxes, LXC, Bubblewrap, Seatbelt, microVMs, Hyperlight) behind a unified JSON configuration schema and a TypeScript SDK.

## Use cases
- run untrusted LLM-generated code safely
- sandbox plugin and tool execution
- execute agent tool calls in an isolated environment
- run untrusted code in a VM or process sandbox
- enforce filesystem and network policies for code execution
- build AI agent code execution with sandboxing

## When to choose
- you need cross-platform sandboxing of untrusted code with a unified config schema
- you want pluggable containment backends from lightweight process isolation to full VMs
- you are building AI agents that execute model-generated code and need a TypeScript SDK

## When to avoid
- you need hardened, production-grade security boundaries today - the project explicitly states no profiles should be treated as security boundaries yet
- you need a stable, mature sandboxing solution rather than an early preview
- you only target platforms or backends not covered by MXC

## Facets
- artifact type: library
- maturity: experimental
- function: security, sdk, configuration-management, developer-tools
- domain: security, developer-tools, cross-platform
- platform: windows, rust
- tags: sandbox, code-execution, untrusted-code, containment, microvm, policy-driven, microsoft, sandboxing, linux, macos, typescript

## Member repositories
- microsoft/mxc (main) score 69

## Provenance
- Observed fields: from GitHub, fetched 2026-09-03T02:15:15.026953+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:07:29.454917+00:00, confidence not recorded.
  - readme: https://github.com/microsoft/mxc (fetched 2026-09-03T02:15:15.026953+00:00, sha bc01efa5b3c5)
- Data as of 2026-08-30T08:39:29.467469+00:00.