{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": true,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": false,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "langsmith-sandbox",
  "checked": "2026-09-30",
  "company": "LangChain, Inc. (LangSmith / LangGraph / LangChain)",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://techcrunch.com/2025/07/08/langchain-is-about-to-become-a-unicorn-sources-say/",
   "quote": "LangChain began its life in late 2022 as an open source project founded by Harrison Chase, who was then an engineer at machine learning startup Robust Intelligence. After generating significant developer interest, Chase transformed the project into a startup"
  },
  "stage": {
   "value": "series-b",
   "source": "https://blog.langchain.com/series-b/",
   "quote": "Today, we’re announcing we’ve raised $125M at a $1.25B valuation to build the platform for agent engineering. ... IVP led the round alongside existing investors Sequoia, Benchmark, and Amplify, as well as new investors CapitalG and Sapphire Ventures.",
   "confidence": "high",
   "note": "Last priced round is the October 2025 Series B ($125M at $1.25B valuation, led by IVP)."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": 160000000,
   "status": "confirmed",
   "basis": "Sum of confirmed rounds: $10M seed (Benchmark, Apr 2023) + $25M Series A (Sequoia, Apr 2023, announced with LangSmith GA Feb 2024) + $125M Series B (IVP-led, Oct 2025)",
   "source": "https://blog.langchain.com/series-b/",
   "quote": "Just a week after announcing a $10 million seed investment from Benchmark, AI darling LangChain has scored even more capital... has raised between $20 million and $25 million in funding at a valuation of at least $200 million from Sequoia"
  },
  "last_round": {
   "type": "series-b",
   "amount_usd": 125000000,
   "date": "2025-10",
   "leads": [
    "IVP"
   ],
   "status": "confirmed",
   "source": "https://blog.langchain.com/series-b/",
   "quote": "Today, we’re announcing we’ve raised $125M at a $1.25B valuation to build the platform for agent engineering. ... IVP led the round alongside existing investors Sequoia, Benchmark, and Amplify, as well as new investors CapitalG and Sapphire Ventures."
  },
  "investors": [
   "IVP",
   "Sequoia Capital",
   "Benchmark",
   "Amplify Partners",
   "CapitalG",
   "Sapphire Ventures",
   "ServiceNow Ventures",
   "Workday Ventures",
   "Cisco Investments",
   "Datadog Ventures",
   "Databricks Ventures",
   "Frontline Ventures"
  ],
  "portfolio_listings": [
   {
    "source": "Cisco Investments",
    "company": "langchain",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "Frontline Ventures",
    "company": "LangChain",
    "batch": null,
    "how": "domain"
   },
   {
    "source": "IVP (Institutional Venture Partners)",
    "company": "LangChain",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "LangChain/LangSmith is the open-source-turned-commercial company behind LangChain, LangGraph, LangSmith (observability/eval/deployment) and LangSmith Sandboxes (the product on this card). Founded by Harrison Chase (ex-Robust Intelligence) in late 2022. Raised $10M seed (Benchmark, Apr 2023), $25M Series A (Sequoia, Apr 2023, publicly tied to LangSmith GA announcement Feb 2024), and $125M Series B (IVP-led, Oct 2025) at a $1.25B valuation, making it a unicorn. No accelerator/incubator affiliation found."
 },
 "id": "langsmith-sandbox",
 "name": "LangSmith Sandboxes",
 "url": "https://www.langchain.com/pricing",
 "category": "agent-sandbox",
 "isolation": "vm",
 "modes": [
  {
   "key": "on-demand",
   "label": "On-demand",
   "flags": [
    "burstable"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "vm"
   },
   "pricing": "resource",
   "vcpu_h": 0.0576,
   "ram_gib_h": 0.01845,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    2,
    6
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": 0.05,
   "max_vcpu": 16,
   "max_ram_gib": 64,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "",
   "cpu_class": "shared",
   "baseline_pct": 100
  }
 ],
 "storage": {
  "included_disk_gib": 0,
  "disk_gib_month": 0.08979,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "allowlist",
   "allowlist": "LangSmith-managed allowlist: PyPI, npm, GitHub, OpenAI, Anthropic, LangSmith; HTTPS 443 (port 80 for selected package repos).",
   "gate": {
    "kind": "sales",
    "plan": "Enterprise",
    "usd": null,
    "recurring": null
   },
   "evidence": [
    {
     "quote": "Restricted egress limits sandbox connections to a LangSmith-managed allowlist of hosts and ports. It applies to non-Enterprise organizations by default and to organizations that request it.",
     "url": "https://docs.langchain.com/langsmith/sandbox-auth-proxy"
    },
    {
     "quote": "It includes PyPI, npm, GitHub, OpenAI, Anthropic, and LangSmith, primarily over HTTPS on port 443. Selected package repositories also allow HTTP on port 80.",
     "url": "https://docs.langchain.com/langsmith/sandbox-auth-proxy"
    },
    {
     "quote": "file a support ticket to request unrestricted egress for your organization",
     "url": "https://docs.langchain.com/langsmith/sandbox-auth-proxy"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Developer",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 8,
   "per_seat": 0,
   "concurrency": 10,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Max 1 seat. 'Limited to 10 Sandboxes' (count of sandboxes, not explicitly running only; stopped sandboxes are kept 14 days by default and may count). Pay-as-you-go after adding a card. 8 LSU ($8) of sandbox usage included per month. Restricted egress (managed allowlist) by default.",
   "internet": "allowlist"
  },
  {
   "name": "Plus (one seat)",
   "fee": 39,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 8,
   "per_seat": 39,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "$39 per seat per month. A seat is every distinct user, including invited users. Seats are prorated when added, with no credit when removed. No published sandbox count cap. Marketing says 'Burst to thousands on demand ... without rate limits or queueing'. Includes 10k base traces and 1 free small serverless deployment. Restricted egress by default for non-Enterprise orgs. Includes 8 LSU ($8) of sandbox usage per month.",
   "internet": "allowlist"
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Unknown limits are not promises of unlimited capacity.",
   "internet": "full"
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu_types": [],
  "regions": [
   "us",
   "eu",
   "asia"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": true,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": true,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "isolation": "vm",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": false,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "max_session_unlimited": true,
  "open_internet": false,
  "usage_api": false,
  "persist_scope": "whole"
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Public list rates are in LSU (1 LSU = $1): compute 0.0576 LSU/vCPU-h, memory 0.01845 LSU/GiB-h, storage 0.000123 LSU/GiB-h, billed per second. Developer and Plus each include 8 LSU of sandbox usage per month (checked 2026-10-14; previously 5 LCU + 1 LSU).",
  "Storage meter scope versus retained filesystem snapshot pricing needs invoice confirmation.",
  "Plus concurrency and maximum sandbox size not stated on pricing page.",
  "ENGINE_CARD cannot apply all independent free CPU/RAM/storage/request allowances exactly. Raw regimes/worked example retain them; any engine subtotal may overstate charges or miss eligibility. Do not subtract them twice.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free.",
  "No desktop or managed browser product is documented. SSH works through the CLI: sandbox ssh-setup writes a ProxyCommand over langsmith sandbox tunnel, but the image must run sshd on port 22 (the default image is not stated to). sandbox console gives a PTY shell. A browser could be installed in a custom image, but none is provided.",
  "Restricted egress by default for non-Enterprise orgs: only a managed allowlist (PyPI, npm, GitHub, OpenAI, Anthropic, LangSmith, mostly HTTPS:443). Unrestricted egress needs a support-ticket exemption.",
  "Enterprise is invoiced annually upfront and LCUs draw down committed LangChain credits. Startups can get up to $10,000 in credits (application program).",
  "New organisations created manually must be on Plus. Developer is only the personal org.",
  "CPU bursts to 2x requested when the host has spare capacity. It is not documented whether burst CPU is billed; the billed allocation is presumably the requested vCPU.",
  "Self-hosted sandboxes require an Enterprise plan; the hosted Developer/Plus plans cannot self-host."
 ],
 "sources": [
  "https://www.langchain.com/pricing",
  "https://docs.langchain.com/langsmith/sandboxes",
  "https://docs.langchain.com/langsmith/sandbox-snapshots",
  "https://docs.langchain.com/langsmith/sandbox-mounts",
  "https://docs.langchain.com/langsmith/sandbox-auth-proxy",
  "https://docs.langchain.com/langsmith/sandbox-cli",
  "https://docs.langchain.com/langsmith/self-host-sandbox-architecture",
  "https://docs.langchain.com/langsmith/enable-self-hosted-sandboxes"
 ],
 "fleet": {
  "default_max_instances": 10,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": null,
  "tiers": "Developer limited to 10 sandboxes; Plus raises access, but numeric paid cap not stated; Enterprise custom.",
  "notes": "Pricing says 10 Sandboxes without fully clarifying retained versus running count. Count recorded conservatively as upper bound; no verified 50/300/1,000 entitlement inferred from scale-to-thousands marketing.",
  "sources": [
   "https://www.langchain.com/pricing",
   "https://docs.langchain.com/langsmith/sandboxes.md"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 24,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 8
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-snapshots",
   "quote": "preserve_memory_on_stop | true suspends RAM on a voluntary stop (idle timeout or explicit stop) so the sandbox resumes where it left off when it next wakes, rather than cold-booting. Defaults to false, which keeps only the filesystem. Restarts triggered by infrastructure maintenance preserve memory either way.",
   "note": "Opt-in per sandbox at create time (REST API field; not yet in Python/TS SDK). Trigger: idle timeout (idle_ttl_seconds, default 600 s) or explicit stop; memory + running processes included; wake is automatic on next exec/file/service-URL request. Default (false) keeps only the filesystem across stop, which is persistent_disk, not this. Stopped sandboxes are deleted after delete_after_stop_seconds (default ~14 days, max 30).",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-snapshots",
   "quote": "You can also capture a snapshot from a running sandbox—install packages, write data files, or configure state, then snapshot the result and reuse it as a new starting point.",
   "note": "SDK sb.capture_snapshot(name) / CLI `langsmith sandbox snapshot capture` / REST POST /api/v2/sandboxes/boxes/{name}/snapshot. Filesystem-only by default; REST `include_memory: true` also captures RAM ('Boot from one and the sandbox resumes where it left off, with its processes still running'), running or stopped sandbox; not supported on overlay-rootfs sandboxes (LangSmith assigns runtime). New sandboxes boot from the snapshot by id or name (template/fork).",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://docs.langchain.com/oss/deepagents/code/remote-sandboxes",
   "quote": "Deep Agents Code uses the sandbox as tool pattern: the dcode process (LLM loop, memory, tool dispatch) runs on your machine, but agent tool calls (read_file, write_file, execute, etc.) target the remote sandbox",
   "note": "LangChain's own agents (Deep Agents Code, Managed Deep Agents on Agent Server, which has thread/run APIs) run OUTSIDE the sandbox and use it as a tool backend. The Deep Agents docs describe an 'agent in sandbox' pattern but say 'you have to add additional infrastructure to handle communication between your application and the agent inside the sandbox' - no first-party API for driving Claude Code/Codex/etc. inside a LangSmith sandbox. Sandbox API is exec/stream/files/tunnel only. Borderline: if the coordinator counts Managed Deep Agents (public beta, US only) as a harness API, flip to true with that caveat.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-auth-proxy",
   "quote": "allow_list | Default-deny. Only listed destinations are reachable, on any protocol. List every host the sandbox needs, including the HTTP(S) hosts your rules and callbacks target.",
   "note": "Per-sandbox proxy_config.access_control allow_list or deny_list; 'Access control is enforced per connection on the sandbox host'. Patterns: host, host:PORT, *.glob, ~regex, literal IP (with port), CIDR - but IP/CIDR entries only affect cleartext HTTP on port 80 (raw TCP/HTTPS to literal IPs is dropped), so in practice domain+port. Only TCP leaves (UDP/QUIC/ICMP dropped). Non-Enterprise orgs are on a LangSmith-managed restricted-egress allowlist by default (PyPI, npm, GitHub, OpenAI, Anthropic, LangSmith); unrestricted needs a support ticket. Private/loopback/metadata addresses always refused.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-auth-proxy",
   "quote": "full_request | When true, every request to a matched host invokes the callback (nothing is cached) and the body includes a request snapshot: method, url, scheme, host, path, query, headers, and up to 1 MiB of the body as body_base64",
   "note": "No declarative method/path allow/deny. HTTP-level control exists via (a) header-injection rules with match_hosts + match_paths, and (b) callbacks: the proxy POSTs the full request (method/path/headers/body) to your endpoint and 'Any non-2xx response ... fails closed: the sandbox's request is rejected with 502' - so your callback can enforce arbitrary per-request policy. HTTPS to matched hosts is MITM-decrypted by the proxy (sandbox trusts its CA).",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-service-urls",
   "quote": "Tokens are short-lived (default 10 minutes, max 24 hours) and there is no server-side refresh mechanism.",
   "note": "Ports are reachable only via authenticated service URLs (per sandbox+port, X-Langsmith-Sandbox-Service-Token / browser token; share links work for anyone holding the link until expiry) or API-key-authenticated TCP tunnels (`langsmith sandbox tunnel`). No public IPs, no IP allowlists documented. Sandbox permissions control which workspace members can interact with a sandbox.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "Sandbox runtime pods that run sandbox workloads on KVM-capable nodes.",
   "note": "Firecracker microVMs with their own guest kernel (self-host-sandbox-architecture, checked 2026-10-14; self-host requires /dev/kvm) with an Ubuntu 24.04 ext4 root filesystem and root access (setup scripts run apt-get). Not documented explicitly; derived. Rules inside would sit behind the host-side egress proxy.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://docs.langchain.com/langsmith/sandbox-auth-proxy",
   "quote": "When configured on a sandbox, an egress proxy running outside the sandbox automatically injects authentication headers into matching outbound requests using your workspace secrets or write-only credentials you provide in the proxy config.",
   "note": "Arbitrary hosts via header rules (workspace_secret / write-only opaque values; placeholders via env_vars), dynamic credentials via signed callbacks, built-in AWS SigV4 signing (static keys or IAM role) and GCP service-account token minting; git over HTTPS works (GitHub example uses Basic auth header). Non-HTTP (PostgreSQL, SSH, Redis) 'passes through unchanged' - no injection for non-HTTP protocols.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandbox-mounts",
   "quote": "Sandbox mounts attach external data sources to a sandbox filesystem when the sandbox is created. Use mounts when sandbox code needs direct file access to object storage buckets, public Git repositories, or Context Hub repos without copying the data into the sandbox image.",
   "note": "No first-party block/network volume product: the sandbox API has boxes, snapshots, registries, files, tunnels, service URLs but no volume resource. Storage is the per-sandbox root filesystem (resizable via --rootfs-capacity / fs_capacity_bytes). Extra storage only via mounts of customer-owned S3/GCS buckets (FUSE-style VFS cache, read-write or read-only), public Git repos and read-only Context Hub repos - see volume_shared.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-mounts",
   "quote": "For writable mounts, keep writeback_seconds low when another process needs to read the objects from S3 or GCS soon after the sandbox writes them.",
   "note": "First-party mount feature for customer-owned S3/GCS buckets (read_only true/false; writable mounts write back to the bucket), plus Git (clone) and Context Hub (read-only, one-way sync) mounts. The same bucket/prefix can be mounted by several sandboxes (bucket is 'the source of truth'), but it is object storage with a local cache and writeback delay, not a POSIX shared filesystem; concurrent multi-sandbox mounting is not stated explicitly. Mounts are set at sandbox creation.",
   "checked": "2026-09-29"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "Your cluster must include dedicated nodes that can run nested workloads with Linux KVM available at `/dev/kvm`. ... On AWS and GCP, use x86_64 Linux instances that expose `/dev/kvm` to the sandbox runtime.",
   "note": "derived: /dev/kvm is required on the HOST so LangSmith's sandbox runtime can boot each customer sandbox as a KVM microVM. No docs expose /dev/kvm or nested virtualization inside the guest sandbox itself; the sandbox API (exec/files/tunnel) has no VM/emulator feature.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "Sandboxes are isolated environments that allow agents to safely execute potentially risky operations, like running arbitrary code or interacting with the filesystem, without affecting your main infrastructure.",
   "note": "not offered: outside the product's scope. LangSmith sandboxes are a code-execution/filesystem VM primitive with no browser or stealth/fingerprinting product (browser: false in the card; caveats confirm no browser is provided).",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "Sandboxes are isolated environments that allow agents to safely execute potentially risky operations, like running arbitrary code or interacting with the filesystem, without affecting your main infrastructure.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving feature is documented anywhere in the sandbox, auth-proxy, or mounts docs.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "GCP US (`smith.langchain.com`) | Generally available ... AWS US (`aws.smith.langchain.com`) | Generally available",
   "note": "Sandboxes run as VMs on LangSmith's GCP/AWS cloud infrastructure; outbound traffic goes through the sandbox auth proxy on that same datacenter infrastructure. No residential/mobile egress is offered.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-snapshots",
   "quote": "You can also capture a snapshot from a running sandbox—install packages, write data files, or configure state, then snapshot the result and reuse it as a new starting point.",
   "note": "capture_snapshot works on a running sandbox (include_memory requires a sandbox that is running or stopped) without stopping it, and the resulting snapshot boots new sandboxes; with include_memory=true the clone also carries running processes (memory_snapshot_fork).",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "Sandboxes are isolated environments that allow agents to safely execute potentially risky operations, like running arbitrary code or interacting with the filesystem, without affecting your main infrastructure.",
   "note": "not offered: outside the product's scope. The default snapshot is a bare Ubuntu 24.04 dev-tools image; no coding-agent template (Claude Code, Codex, OpenCode, etc.) is preinstalled or offered. Managed Deep Agents (LangChain's own agent framework) requires you to write the agent's tools/instructions yourself, not a preinstalled harness.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/python/managed-deep-agents-overview",
   "quote": "You write the agent's intelligence: its instructions, the tools it can call, the skills it follows, and you select the model that drives it. MDA provides everything underneath",
   "note": "not offered: outside the product's scope. Managed Deep Agents runs the Deep Agents harness/runtime for agents YOU define (business logic, tools, instructions); it is not a fixed, provider-owned browser/computer-use/research agent product driven through a first-party task API.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://docs.langchain.com/use-these-docs",
   "quote": "Our documentation exposes two complementary Model Context Protocol (MCP) servers that let AI applications query LangChain content in real-time. ... `docs-langchain` https://docs.langchain.com/mcp ... `reference-langchain` https://reference.langchain.com/mcp",
   "note": "LangChain's MCP servers are for querying documentation/API reference, not for controlling sandboxes. No sandbox-control MCP server is documented; the sandbox API surface is the langsmith SDK, CLI, and REST/WS endpoints only.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "with client.sandbox() as sb:\n      result = sb.run(\"python3 -c 'print(2 + 2)'\")\n      print(result.stdout)  # \"4\\n\"",
   "note": "Default snapshot (Ubuntu 24.04 with common dev tools) includes Python out of the box, plus a first-party langsmith[sandbox] Python SDK.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "const result = await sandbox.run(\"node -e 'console.log(2 + 2)'\");",
   "note": "Default snapshot includes Node.js out of the box, plus a first-party langsmith TypeScript/Node SDK (npm install langsmith).",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandbox-service-urls",
   "quote": "Service URLs let you access an HTTP service running inside a sandbox ... without tunnels, port forwarding, or CLI tools. Each sandbox + port combination gets its own URL",
   "note": "There is no per-sandbox public IPv4 address; ports are reached only via authenticated service URLs or API-key-authenticated TCP tunnels, never a raw public IP.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandbox-auth-proxy",
   "quote": "Matching is on the destination exactly as the sandbox addressed it. A hostname entry matches requests made to that hostname; an IP or CIDR entry matches requests made to a literal IP address. Neither is resolved",
   "note": "Egress control and credential injection are hostname/domain based through a shared proxy layer; no documentation offers a fixed, dedicated outbound IP per sandbox or organization.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "On AWS and GCP, use x86\\_64 Linux instances that expose `/dev/kvm` to the sandbox runtime.",
   "note": "not offered: outside the product's scope. Sandbox create/update API (cpu_millicores, vcpus, mem_bytes, fs_capacity_bytes) has no GPU field, and the card's gpu_types is empty; sandboxes are plain KVM microVMs for code execution.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "On AWS and GCP, use x86\\_64 Linux instances that expose `/dev/kvm` to the sandbox runtime.",
   "note": "not offered: outside the product's scope. All documented sandbox environments and the default snapshot are Ubuntu 24.04 Linux; no Windows image or OS option is documented.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "On AWS and GCP, use x86\\_64 Linux instances that expose `/dev/kvm` to the sandbox runtime.",
   "note": "not offered: outside the product's scope. LangSmith sandboxes run on Linux KVM microVMs on GCP/AWS; no macOS runtime is offered or documented.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "On AWS and GCP, use x86\\_64 Linux instances that expose `/dev/kvm` to the sandbox runtime.",
   "note": "Self-hosted setup explicitly requires x86_64 Linux instances; no ARM64 sandbox architecture option is documented anywhere in the sandbox docs or create-sandbox API.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/deploy-self-hosted-full-platform",
   "quote": "Sandbox runtime pods that run sandbox workloads on KVM-capable nodes.",
   "note": "The Sandboxes feature is part of the proprietary LangSmith platform (self-hostable/BYOC but not released under an OSI license); the `sandbox-host` runtime image and platform backend are not published as open source. (LangChain's separate agent-framework libraries, e.g. langchain/langgraph, are open source, but that is a different product from the Sandboxes runtime being modeled here.)",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://docs.langchain.com/langsmith/sandbox-sdk",
   "quote": "`idle_ttl_seconds` | The launcher stops the sandbox after this many seconds of inactivity. Any command execution or file I/O resets the timer. `0` disables the idle stop.",
   "note": "No fixed wall-clock cap on a running sandbox is documented; idle_ttl_seconds can be set to 0 to disable the idle stop entirely ('Long-running: never auto-stop'), so a sandbox kept active (or explicitly non-idle) runs indefinitely like a VM, limited only by cost/usage, not a hard session-length ceiling.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/fleet/computer-use",
   "quote": "Computer use gives your Fleet agent access to an isolated virtual computer. The agent can write and execute code, manage files, install packages, and call authenticated external APIs without exposing credentials to the language model.",
   "note": "not offered: the product's only 'computer' surface (LangSmith Sandboxes, including the Fleet-branded 'Computer use' feature built on the same sandboxes) is a headless VM reached via exec/files/tunnels/service-URLs; no VNC/RDP/streamed GUI desktop is documented anywhere in the sandbox, Fleet, or Deep Agents docs.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "Computer use gives your Fleet agent access to an isolated virtual computer. The agent can write and execute code, manage files, install packages, and call authenticated external APIs without exposing credentials to the language model.",
   "note": "not offered: no first-party/managed browser is documented for LangSmith Sandboxes or the Fleet 'computer'; access is exec/file APIs, service URLs and TCP tunnels on a bare Linux microVM. A browser could be installed inside a custom image, but none is provided or managed by LangChain.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/fleet/computer-use",
   "quote": "Computer use gives your Fleet agent access to an isolated virtual computer. The agent can write and execute code, manage files, install packages, and call authenticated external APIs without exposing credentials to the language model.",
   "note": "LangChain's own product literally named 'Computer use' is code-exec + files + authenticated HTTP APIs on a headless sandbox - not a screenshot+click GUI-driving API. No screenshot/click/mouse/keyboard control endpoints are documented anywhere in the sandbox or Fleet docs, so the screenshot-and-click sense of computer_use is not offered.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "Resizing an existing sandbox with `update_sandbox` / `updateSandbox` takes effect at its next start, and a resize enforces only the 64 GiB ceiling rather than the per-vCPU ratio.",
   "note": "Confirmed by the CLI docs too: 'langsmith sandbox update my-vm --rootfs-capacity 16gb ... Resource changes take effect the next time the sandbox boots.' vCPU/RAM/disk changes require a stop/restart cycle, not a live resize of a running sandbox.",
   "checked": "2026-09-30"
  },
  "cpu_class": {
   "value": {
    "on-demand": "burstable:100"
   },
   "source": "https://docs.langchain.com/langsmith/sandbox-sdk",
   "quote": "Sandboxes burst to twice their requested CPU when the host has spare capacity.",
   "note": "The billed/requested vCPU allocation (vcpus / cpu_millicores) is the guaranteed baseline (100% of the requested core), and the sandbox can burst to 2x that when the host has spare capacity - i.e. burstable with a 100% published baseline, not a dedicated pinned core and not a plain shared/oversubscribed vCPU with no guarantee. No separate CPU tier/mode is documented; only one pricing mode (on-demand) exists on the card.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.langchain.com/langsmith/sandboxes",
   "quote": "The sandbox API provides exec, files, tunnels, and service URLs; pricing is published in LCU/LSU units per resource. No documented endpoint, SDK call, or CLI command retrieves billable usage per sandbox, per tag, or per project.",
   "note": "granularity: account-only; cost: no; Billing access appears limited to account-level invoice and dashboard. The comprehensive feature_evidence in the source card includes no usage_api or billing_api feature, indicating no programmatic access is offered for per-sandbox cost attribution.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "persist_scope": {
   "value": "whole",
   "source": "https://docs.langchain.com/langsmith/sandbox-snapshots",
   "quote": "preserve_memory_on_stop | true suspends RAM on a voluntary stop (idle timeout or explicit stop) so the sandbox resumes where it left off when it next wakes, rather than cold-booting. Defaults to false, which keeps only the filesystem. Restarts triggered by infrastructure maintenance preserve memory either way.",
   "note": "The whole disk survives a stop, installed packages included.",
   "checked": "2026-10-01"
  },
  "ssh": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/sandbox-cli",
   "quote": "Use `sandbox ssh-setup` to configure standard SSH tools such as `ssh`, `scp`, `rsync`, and `sftp` through a sandbox tunnel.",
   "note": "\"`ssh-setup` modifies local SSH configuration and writes a `ProxyCommand` that calls `langsmith sandbox tunnel`.\" and \"The sandbox image must run `sshd` on port `22`.\" Also \"Use `sandbox console` for a PTY-backed interactive shell\".",
   "checked": "2026-10-14"
  },
  "isolation": {
   "value": "vm",
   "source": "https://docs.langchain.com/langsmith/self-host-sandbox-architecture",
   "quote": "A sandbox is a Firecracker microVM, not a Kubernetes pod.",
   "note": "\"Each `sandbox-host` pod manages multiple microVMs, each with its own guest kernel.\"",
   "checked": "2026-10-14"
  },
  "self_host": {
   "value": true,
   "source": "https://docs.langchain.com/langsmith/enable-self-hosted-sandboxes",
   "quote": "Sandboxes require an Enterprise plan.",
   "note": "Self-hosting is Enterprise-only (sales).",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "GCP US (smith.langchain.com)",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "AWS US (aws.smith.langchain.com)",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "DE",
   "state": null,
   "city": null,
   "provider_region": "GCP EU (eu.smith.langchain.com)",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SG",
   "state": null,
   "city": null,
   "provider_region": "GCP APAC (apac.smith.langchain.com)",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://docs.langchain.com/langsmith/sandboxes",
 "locations_quote": "Environment availability | Environment Status GCP US ( smith.langchain.com ) Generally available GCP EU ( eu.smith.langchain.com ) Generally available GCP APAC ( apac.smith.langchain.com ) Generally available AWS US ( aws.smith.langchain.com ) Generally available",
 "locations_checked": "2026-10-01"
}