# Akamai Agent Sandbox

> A sandbox on Akamai Functions that runs AI agents and the code they generate in WebAssembly isolation with outbound access blocked by default.

Akamai Agent Sandbox is a serverless runtime from Akamai for AI agents that write and execute their own code. It extends Akamai Functions with WebAssembly isolation and deny-by-default outbound access. It is currently offered as a tech preview with access by request.

## What It Is

Akamai Agent Sandbox runs an agent as a Spin application on Akamai Functions, so the agent already sits inside a WebAssembly sandbox. The code the agent writes, in JavaScript or Python, runs in a restricted runtime nested inside that sandbox. Agents can connect to any model exposed through an OpenAI-compatible API, including models hosted on LKE.

## How the Workflow Runs

Developers build the agent with the Spin SDK, develop and test locally in Spin, then deploy once to Akamai Functions. The agent runs across Akamai Cloud core regions, with requests routed to the closest instance. Agents can generate code, run it in the sandbox, use the results and continue iterating. They can also call tools and connect to MCP servers.

## Containment Controls

- Outbound network access is blocked by default, so agent-generated code cannot send data out or pull in malicious content.
- Execution limits are enforced by the runtime, and neither the agent nor its code can raise them.
- Runtime APIs that could have unintended consequences are removed.
- Each agent runs in its own sandbox, so one tenant's code cannot affect another's workloads.
- Key value storage holds agent context and memories between steps.

## Use Cases and Current Status

Akamai describes use cases including code execution for agents (data analysis, calculations, charts), multi-tenant isolation for SaaS teams, and controlled access to tools, skills and MCP servers. The tech preview supports intermittent agents, where each step completes in about a minute and the agent then stops until its next instruction. Akamai says stateful components will later add support for agents that stay alive for days or weeks.

## Open Source Foundation

Akamai states that the sandbox capability ships in the open source Spin SDK, an Akamai extension to Spin, a CNCF project.

## Features
- WebAssembly isolation for agents and generated code
- Outbound network access blocked by default
- Runtime-enforced execution limits
- Restricted JavaScript or Python runtime for agent-written code
- Per-tenant isolation on Akamai Functions
- Key value storage for agent context and memory
- Works with any OpenAI-compatible model
- Removal of risky runtime APIs
- Tool and MCP server access control
- Local development with the open source Spin SDK

## Integrations
Akamai Functions, Spin SDK, OpenAI-compatible APIs, MCP servers, Akamai Cloud LKE

## Platforms
WEB, API, DEVELOPER_SDK

## Pricing
Paid

## Links
- Website: https://www.akamai.com/products/akamai-agent-sandbox
- Documentation: https://techdocs.akamai.com/home
- EveryDev.ai: https://www.everydev.ai/tools/akamai-agent-sandbox