Akamai Agent Sandbox
A sandbox on Akamai Functions that runs AI agents and the code they generate in WebAssembly isolation with outbound access blocked by default.
At a Glance
About Akamai Agent Sandbox
Akamai Agent Sandbox is a serverless runtime from Akamai for AI agents that write and execute their own code. It extends Akamai Functions with WebAssembly isolation and deny-by-default outbound access. It is currently offered as a tech preview with access by request.
What It Is
Akamai Agent Sandbox runs an agent as a Spin application on Akamai Functions, so the agent already sits inside a WebAssembly sandbox. The code the agent writes, in JavaScript or Python, runs in a restricted runtime nested inside that sandbox. Agents can connect to any model exposed through an OpenAI-compatible API, including models hosted on LKE.
How the Workflow Runs
Developers build the agent with the Spin SDK, develop and test locally in Spin, then deploy once to Akamai Functions. The agent runs across Akamai Cloud core regions, with requests routed to the closest instance. Agents can generate code, run it in the sandbox, use the results and continue iterating. They can also call tools and connect to MCP servers.
Containment Controls
- Outbound network access is blocked by default, so agent-generated code cannot send data out or pull in malicious content.
- Execution limits are enforced by the runtime, and neither the agent nor its code can raise them.
- Runtime APIs that could have unintended consequences are removed.
- Each agent runs in its own sandbox, so one tenant's code cannot affect another's workloads.
- Key value storage holds agent context and memories between steps.
Use Cases and Current Status
Akamai describes use cases including code execution for agents (data analysis, calculations, charts), multi-tenant isolation for SaaS teams, and controlled access to tools, skills and MCP servers. The tech preview supports intermittent agents, where each step completes in about a minute and the agent then stops until its next instruction. Akamai says stateful components will later add support for agents that stay alive for days or weeks.
Open Source Foundation
Akamai states that the sandbox capability ships in the open source Spin SDK, an Akamai extension to Spin, a CNCF project.
Community Discussions
Be the first to start a conversation about Akamai Agent Sandbox
Share your experience with Akamai Agent Sandbox, ask questions, or help others learn from your insights.
Pricing
Tech preview — request access
Product-specific tech preview access is requested through Akamai. Public preview fees, included usage and future pricing are not disclosed. PAID/USD are required catalog placeholders, not a verified charge or currency. Do not apply general Akamai Cloud trial credits to this product without confirmation.
- Access by request
- Build with Spin SDK
- Deploy on Akamai Functions
Capabilities
Key Features
- WebAssembly isolation for agents and generated code
- Outbound network access blocked by default
- Runtime-enforced execution limits
- Restricted JavaScript or Python runtime for agent-written code
- Per-tenant isolation on Akamai Functions
- Key value storage for agent context and memory
- Works with any OpenAI-compatible model
- Removal of risky runtime APIs
- Tool and MCP server access control
- Local development with the open source Spin SDK
