{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": false,
  "private_network": false,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": true,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": true,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "superserve",
  "checked": "2026-09-30",
  "company": "Superserve Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://superserve.ai/careers",
   "quote": "We are a small, globally distributed team based in San Francisco, backed by forward-thinking investors."
  },
  "stage": {
   "value": "unknown",
   "source": "https://job-boards.greenhouse.io/superserve/jobs/6178870004",
   "quote": "We're a small, globally distributed team based in San Francisco, backed by forward-thinking investors.",
   "confidence": "low",
   "note": "Company (Superserve Inc., legal name per Greenhouse job posting) confirms it has outside investors ('backed by forward-thinking investors') and describes a single founder ('work directly with the founder'), but names no investors, round type, or amount anywhere public. No YC/accelerator match found (no ycombinator.com/companies page; the @superserve X/Twitter handle belongs to an unrelated person, not the company). No Crunchbase/PitchBook data accessible (Crunchbase blocked scraping; no cached profile found). Product launched publicly via 'Show HN' on 2026-07-21, suggesting an early-stage (pre-seed/seed) company, but this is inference, not confirmation, so stage is left unknown rather than guessed."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": null,
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": "https://superserve.ai/careers (describes itself as 'a small, globally distributed team' with one open engineering role; no headcount figure given)"
  },
  "note": "Superserve is a young, small (single-founder-led per its own job posting), San Francisco-based startup selling Firecracker microVM sandboxes for AI agents; it publicly launched via a 'Show HN' post on 2026-07-21. It states it is venture-backed ('backed by forward-thinking investors') but discloses no investor names, round type/size, dates, or revenue anywhere on its site, blog, careers page, job postings, or social profiles found. Crunchbase/PitchBook/TechCrunch coverage was not found or was inaccessible (Crunchbase returned a Cloudflare block; no cached profile located). Treat funding/stage/revenue fields as genuinely unknown rather than inferred."
 },
 "id": "superserve",
 "name": "Superserve",
 "url": "https://superserve.ai/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "on-demand",
   "label": "Sandbox, pay-as-you-go (allocated vCPU + RAM per second while active)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "isolation": "firecracker"
   },
   "pricing": "resource",
   "vcpu_h": 0.0504,
   "ram_gib_h": 0.0162,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": 1,
   "max_vcpu": 10,
   "max_ram_gib": 20,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "$0.000014/vCPU-s and $0.0000045/GiB-s (effective 2026-06-17 per public billing API). Memory is 'allocated memory, billed per second of active runtime'. Shape is fixed per template: docs build-spec lists 1-4 vCPU, 256-4096 MiB RAM, 1-8 GiB disk, but the OpenAPI ceiling is 10 vCPU / 20480 MiB / 65536 MiB (used here); new teams capped at 2 vCPU / 2 GiB until support raises it. Paused = no compute. Auto-pause (timeoutSeconds, max 7 d) is off by default and counts active time, not idleness: a forgotten sandbox bills until paused/killed. Basis check 2026-09-28: vCPU 'Per-second billing. Pay only while sandboxes are running.'; memory 'Allocated memory, billed per second of active runtime.' (https://superserve.ai/pricing): 'active runtime' means the running state, not CPU use, so alloc/alloc. Auto-pause 'is a cap on active time, not idle time' and is off by default (https://docs.superserve.ai/sandbox/lifecycle), so auto_stop_idle stays false."
  }
 ],
 "storage": {
  "included_disk_gib": 0,
  "disk_gib_month": 0.07884,
  "disk_billed_when_stopped": true,
  "snapshot_gib_month": 0.07884,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": false,
  "internet": {
   "default": "configurable",
   "evidence": [
    {
     "quote": "By default, a sandbox can reach any public IP on the internet.",
     "url": "https://docs.superserve.ai/sandbox/networking.md"
    },
    {
     "quote": "Lock down sandbox egress to specific CIDRs or domains with allow and deny lists.",
     "url": "https://docs.superserve.ai/llms.txt"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "Pay-as-you-go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 20,
   "max_session_h": null,
   "max_vcpu": 10,
   "max_ram_gib": 20,
   "sizes_allowed": null,
   "note": "No fee, no card to start. Per-team active-sandbox limit (429 too_many_sandboxes) defaults to 20 for new teams: not on the pricing page or docs, but set in vendor source (team.max_sandboxes DEFAULT 20, migration 20260612000001) and printed in the 429 message ('team has reached the limit of %d sandboxes'). Paused sandboxes do not count; raise via support. New teams capped at 2 vCPU / 2 GiB per sandbox."
  },
  {
   "name": "Enterprise (on-prem)",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": null,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "On-premise deployment and dedicated support; contact sales. Pricing unpublished."
  }
 ],
 "free": {
  "monthly_credit": 0,
  "one_time_credit": 100
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": true,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": false,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": false,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "regions": [
   "us"
  ],
  "soc2": true,
  "hipaa": true,
  "sso": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": false,
  "credential_injection": true,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": true,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "isolation": "firecracker",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "any-http",
  "volume_attach": false,
  "volume_shared": false,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "max_session_unlimited": true,
  "fast_boot": true,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": 316.3,
  "burst_tti_ms": 516.33,
  "dax_s": 94.14
 },
 "perf_source": "benchmarks.json computesdk: cold_start_tti median 316.3 ms (2026-08-07), burst_tti median 516.33 ms at 100 concurrency (2026-09-25), DAX total 94.14 s (2026-09-25; env 8 logical CPUs / 15.7 GiB / x86_64 - larger than the documented 4 vCPU ceiling, so the benchmark account likely had raised limits). No hpc CPU run.",
 "knobs": [],
 "caveats": [
  "Per-sandbox shape is fixed per template. Platform ceiling is 10 vCPU / 20 GiB RAM / 64 GiB disk (OpenAPI schema + controlplane absoluteMax* constants; the docs build-spec table still shows the older 4 vCPU / 4096 MiB / 8192 MiB). New teams are capped at 2 vCPU / 2 GiB / 8 GiB disk and 10 templates; larger shapes need an email to support. A 4 vCPU / 8 GiB workload is feasible only after support raises the cap.",
  "Storage $0.000108/GiB-h (= $0.07884/GiB-month at 730 h) is on the pricing page ('Paused sandboxes are billed only for storage'), but the public billing API (effective 2026-06-17) marks storage billable:false and the usage-series docs say storage 'remains tracked-only and is excluded' from billed totals. Card uses the published list price; today's invoices appear to charge $0 for storage/snapshots. Whether running-sandbox disk is also metered as storage is not stated.",
  "Paused sandboxes are kept forever by default (autoDeleteSeconds optional, max 30 days); with storage unbilled they currently cost nothing.",
  "Auto-pause is opt-in and based on active time, not idleness: an idle but running sandbox bills full allocated vCPU+RAM.",
  "Free credit: pricing page only says 'Start for free, no credit card'. Vendor source code (superserve-ai/sandbox PR #454, merged 2026-09-25) shows a $5 signup trial grant plus a $95 activation bonus on Stripe checkout (card added), one redemption per user; encoded as one_time_credit 100 (not on the pricing page).",
  "Startup program: up to $50k credits (application).",
  "Egress/ingress not metered in the public rate card (only vcpu, memory_gib, storage_gib meters exist); not stated as free, so null.",
  "Billing granularity per second; minimum billed time not published. Regions not documented (API is cell-based).",
  "Rates are identical to E2B's list rates.",
  "Active-sandbox cap of 20 per team (concurrency) is from vendor source and the 429 message, not the pricing page or docs; support can raise it, with no published higher tier or turnaround, so 50+ parallel scenarios show as not fitting self-serve.",
  "Other per-team limits: 100 snapshots per team, 20 per sandbox, 4 in flight (docs, raisable via support); API request rate 50 req/s with burst 150 per team (vendor source ratelimit.go, not documented).",
  "Vendor source (migration 20260929000001_prospective_storage_billing) adds a per-team storage-billing activation cutoff; the public billing API still marks storage billable:false, so the listed $0.000108/GiB-h storage may start being invoiced team by team."
 ],
 "sources": [
  "https://superserve.ai/pricing",
  "https://api.superserve.ai/billing/pricing/public",
  "https://docs.superserve.ai/api-reference/billing/get-public-payg-billing-pricing",
  "https://docs.superserve.ai/api-reference/billing/get-timezone-aware-billing-usage-chart-buckets",
  "https://docs.superserve.ai/sandbox/lifecycle",
  "https://docs.superserve.ai/templates/build-spec",
  "https://docs.superserve.ai/errors",
  "https://raw.githubusercontent.com/superserve-ai/sandbox/refs/heads/main/api/openapi.yaml",
  "https://github.com/superserve-ai/sandbox/pull/454",
  "https://github.com/superserve-ai/sandbox/blob/main/supabase/migrations/20260612000001_lower_default_limits.sql",
  "https://www.computesdk.com/benchmarks/sandboxes/"
 ],
 "fleet": {
  "default_max_instances": 20,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": "No credit card to start.",
  "tiers": null,
  "notes": "Official error docs enforce a per-team active sandbox count (429 too_many_sandboxes: pause/delete or contact support); paused sandboxes do not count (OpenAPI). The numeric default (20) is not in public docs; it comes from vendor source (supabase/migrations/20260612000001_lower_default_limits.sql: 'ALTER TABLE team ALTER COLUMN max_sandboxes SET DEFAULT 20;', unchanged by later migrations; new-team creation inserts only name/home_region) and is echoed in the 429 message. Higher limits unpublished; no guaranteed 50/300/1,000 fleet or review SLA. Checked 2026-10-14.",
  "sources": [
   "https://superserve.ai/pricing",
   "https://docs.superserve.ai/errors",
   "https://github.com/superserve-ai/sandbox/blob/main/supabase/migrations/20260612000001_lower_default_limits.sql",
   "https://github.com/superserve-ai/sandbox/blob/main/internal/api/handlers.go"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 2,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 15
 },
 "feature_evidence": {
  "concurrency": {
   "value": 20,
   "source": "https://github.com/superserve-ai/sandbox/blob/main/supabase/migrations/20260612000001_lower_default_limits.sql",
   "quote": "-- max_sandboxes default 100 -> 20; bumps rows still on the old default. Templates default in code.\nALTER TABLE team ALTER COLUMN max_sandboxes SET DEFAULT 20;",
   "note": "Vendor source, not a public pricing/docs page. The 429 handler prints the team's value: \"team has reached the limit of %d sandboxes; delete some or contact support@superserve.ai for higher\" (internal/api/handlers.go). Public docs (https://docs.superserve.ai/errors) only say: \"Team has reached its active sandbox count limit. Pause/delete one or contact support.\" OpenAPI: 'paused sandboxes do not count'. No later migration changes the default and create_team_with_signup_trial inserts only name/home_region, so new teams get 20. Raise via support (no published higher tier).",
   "checked": "2026-10-14"
  },
  "snapshot_auto": {
   "value": true,
   "source": "https://docs.superserve.ai/sandbox/lifecycle.md",
   "quote": "Set `timeoutSeconds` to auto-pause a sandbox after it has been active for that long. Pausing checkpoints its state and stops compute billing, so a sandbox you forget about won't keep running and billing.",
   "note": "Opt-in (off by default); trigger is a cap on active time, not idleness ('It's a cap on active time, not idle time'). Memory included: 'Resume restores full memory and filesystem.' Next commands.run()/file op/connect() auto-resumes. No idle-based pause.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.superserve.ai/sandbox/snapshots.md",
   "quote": "A snapshot saves a sandbox's memory and disk at a point in time. Sandboxes you create from a snapshot are called forks. A fork starts exactly where the snapshot left off, with its files, installed packages and running processes in place.",
   "note": "Memory included; of an active (paused <1 s for capture) or paused sandbox; any number of new sandboxes boot from it via from_snapshot; snapshots outlive the source sandbox. Limits: 100 per team, 20 per sandbox. Plus manual pause() = full VM checkpoint of the same sandbox.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://docs.superserve.ai/integrations/coding-agents/claude.md",
   "quote": "Open the sandbox in the [console](https://console.superserve.ai?utm_source=docs\\&utm_medium=link), launch the terminal, and run `claude`.",
   "note": "Agents are provided as templates (superserve/claude-code; guides for Codex, OpenCode, Kilocode, OpenClaw, Hermes) and run via terminal/exec (exec, SSE stream, WebSocket, interactive sessions). The Claude Managed Agents and Cursor Self-Hosted Machines integrations use Anthropic's/Cursor's own session APIs with Superserve only as the execution sandbox. No first-party Superserve API to start an agent with a prompt or manage its conversations.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.superserve.ai/sandbox/networking.md",
   "quote": "`allowOut` / `allow_out` accepts a mix of CIDRs and domain patterns. Combine it with `denyOut: [\"0.0.0.0/0\"]` to build a strict allowlist - deny everything, then add exceptions.",
   "note": "Per sandbox; default allows all public internet; private/link-local/loopback always blocked; denyOut takes IPs/CIDRs only; domain rules matched on the connection; updatable live on an active sandbox; forks inherit rules. Platform-recorded network log of HTTP/HTTPS (80/443) connections.",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/networking.md",
   "quote": null,
   "note": "Rule format is only allowOut (IPs/CIDRs/domains) and denyOut (IPs/CIDRs); no method/path/header rules. Only HTTP-level control is secret injection scoped per host. Network log records method/path/status (observability, not policy).",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.superserve.ai/sandbox/preview-urls.md",
   "quote": "Every published port stores its own `public` or `private` access mode. Changing\nthe sandbox default does not rewrite existing ports, so public and private ports\ncan coexist in one sandbox.",
   "note": "Strict publication: only explicitly published ports are reachable (others 404); per-port public vs private; private ports need a minted token (header) scoped to sandbox+port, rotatable per port. No IP allowlist; no raw TCP; legacy_public mode only for old sandboxes.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Firecracker microVM with its own kernel and root (templates run as root / sudo users; 'every Superserve sandbox is a full Firecracker microVM, FUSE works inside', storage/archil). iptables/nftables inside not documented.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "any-http",
   "source": "https://docs.superserve.ai/secrets/overview.md",
   "quote": "Code running inside the sandbox never sees the real value. It sees a **stand-in token**, and Superserve swaps that token for your real credential as each request leaves the sandbox — only on requests to the hosts you allow.",
   "note": "Provider shortcuts (Anthropic, OpenAI, Gemini, OpenRouter, GitHub, GitLab, Vercel, Cloudflare, Stripe, Notion, Resend...) plus custom secrets with auth type bearer / api-key header / basic / custom header templates for any hosts (secrets/create). Host-scoped; attach/detach/rotate live; per-secret audit log of every request. HTTP(S) header injection only; databases/SSH not covered (DATABASE_URL shown as plain env var).",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.superserve.ai/api-reference/sandboxes/create-a-new-sandbox.md",
   "quote": null,
   "note": "No first-party volume: create-sandbox schema has no volume/mount field and the docs never mention volumes. Storage docs are guides for third-party FUSE mounts inside the VM: Archil elastic disks, Mesa versioned filesystems, S3/GCS/R2 buckets (mountpoint-s3/gcsfuse/rclone style). Disk per sandbox is fixed by template (platform ceiling 8 GiB in docs).",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.superserve.ai/storage/archil.md",
   "quote": "Mount an Archil **disk** inside a Superserve sandbox to give it a fast workspace whose data persists across runs, survives the sandbox, and can be mounted by several sandboxes at once with `--shared`.",
   "note": "Not first-party: shared read-write filesystems only via the third-party Archil service (own account/billing) or user-mounted buckets, documented as integration guides.",
   "checked": "2026-09-29"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.superserve.ai/templates/build-spec.md",
   "quote": "Powered by Firecracker MicroVMs.",
   "note": "Not documented anywhere (no /dev/kvm, nested virtualization, or 'run VMs inside your sandbox' mention across docs/build-spec/OpenAPI). Firecracker microVMs do not expose hardware virtualization extensions to the guest by default, so nested KVM is not available; derived.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://superserve.ai",
   "quote": "Virtual machines for long-horizon agents. Durable Firecracker VMs that pause indefinitely, resume instantly, and run as long as your agents need.",
   "note": "not offered: outside the product's scope. Superserve is a generic Firecracker sandbox/VM runtime for code execution — the homepage lists running 'AI-generated code, browsers, or system tasks' as a use case a customer can build, but there is no managed/preinstalled browser, browser template, or browser-control API documented anywhere in docs.superserve.ai.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://superserve.ai/pricing",
   "quote": "Superserve — Virtual machines for long-horizon agents.",
   "note": "not offered: outside the product's scope. No stealth/fingerprinting features are mentioned anywhere in the docs; the product is generic sandbox infrastructure, not a browser-automation/anti-bot product.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://superserve.ai/pricing",
   "quote": "Superserve — Virtual machines for long-horizon agents.",
   "note": "not offered: outside the product's scope. No CAPTCHA-solving feature is mentioned anywhere in the docs; the product is generic sandbox/VM infrastructure, not a browser/scraping product.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.superserve.ai/sandbox/networking.md",
   "quote": "By default, a sandbox can reach any public IP on the internet. The platform always blocks egress to private, link-local, and loopback ranges regardless of your allow rules.",
   "note": "derived: sandboxes run as Firecracker microVMs on cloud infrastructure (Google Cloud Platform is a listed subprocessor in the Vanta trust center); no residential/mobile proxy product is offered or mentioned, so outbound traffic uses standard cloud/datacenter IPs.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/connect.md",
   "quote": "Reconnect to a sandbox you created earlier using its ID, and list sandboxes on your team.",
   "note": "not offered: access to a sandbox is exclusively via the SDK/API (commands.run/spawn, exec REST/SSE/WebSocket, files API). SSH is never mentioned in the docs, quickstart, SDK reference, or OpenAPI spec — there is no SSH endpoint or key-injection mechanism documented.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.superserve.ai/api-reference/snapshots/snapshot-a-sandbox.md",
   "quote": "The sandbox must be active or paused. A running sandbox is paused for the capture: under a second for the first memory snapshot of a sandbox, longer when all of memory has to be written.",
   "note": "Forking (via a snapshot + from_snapshot) briefly pauses a running sandbox to take the memory+disk snapshot before it resumes, so it is not cloned while continuously running.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://docs.superserve.ai/api-reference/sandboxes/activate-a-sandbox.md",
   "quote": "Returns the sandbox with a fresh access token. If the sandbox is paused, it is resumed first. Idempotent — calling it on an active sandbox just returns a new token.",
   "note": "Confirmed broadly: 'sandbox_exec and the file tools transparently resume a paused sandbox, so agents never need to call sandbox_resume first' and 'A paused sandbox wakes on its own before the session opens' (commands/sessions.md) — any exec/file/connect call auto-resumes a paused sandbox.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.superserve.ai/api-reference/sandboxes/partially-update-a-running-sandbox.md",
   "quote": "Currently patchable fields - `network` ... `metadata` ... `auto_delete_seconds` ... `timeout_seconds` ... `preview_access`",
   "note": "The homepage markets 'Elastic resource allocation — Let your agents request CPU/memory resources on the fly from within the box', but the documented PATCH /sandboxes/{id} endpoint (the only way to modify a running sandbox) does not include a vcpu/memory field, and no separate resize endpoint exists in the OpenAPI spec; per-sandbox vCPU/RAM is fixed by the template at creation.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://superserve.ai/pricing",
   "quote": "Superserve — Virtual machines for long-horizon agents.",
   "note": "not offered: outside the product's scope. Superserve provides only sandbox/VM execution infrastructure; coding/browser/research agents are third-party (Claude Code, Codex, Claude Managed Agents, Cursor Cloud Agents, LangChain, OpenAI Agents SDK, Agno) run by the customer inside the sandbox — there is no first-party Superserve agent or API to drive one.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/networking.md",
   "quote": "By default, a sandbox can reach any public IP on the internet.",
   "note": "No fixed/static outbound IP, elastic IP, or NAT-gateway feature is documented anywhere; network controls only cover allow/deny rules by CIDR/domain, not a stable egress address. Matches card's network.ipv4_available: false (no public IPv4 either).",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://docs.superserve.ai/api-reference/rbac/add-or-invite-a-team-member.md",
   "quote": "Get team management state ... Returns the caller-visible team members, role assignments, and capability flags used by customer-facing member management UI.",
   "note": "Team membership is managed by email invite plus role assignment; no SAML/OIDC/SSO endpoint, field, or mention exists anywhere in the RBAC API, docs, pricing, or enterprise page (enterprise plan only advertises 'on-premise deployment and dedicated support').",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://docs.superserve.ai/introduction.md",
   "quote": "Superserve provides sandbox infrastructure to run code in isolated cloud environments powered by Firecracker MicroVMs.",
   "note": "No region-selection field exists on sandbox/template creation and no EU/Europe region is mentioned anywhere in the docs; the card's own researched regions list is [\"us\"] only (API described as cell-based with no documented region parameter).",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://superserve.ai",
   "quote": "Indefinite sessions - NO 24-HOUR LIMIT",
   "note": "A sandbox stays active until paused/deleted or an opt-in timeout_seconds cap (off by default, max 7 days for the auto-pause trigger) is set; there is no mandatory maximum runtime after which the platform force-stops a sandbox.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "corrected_from": false,
   "source": "https://docs.superserve.ai/sandbox/lifecycle",
   "quote": "Pausing checkpoints its state and stops compute billing... Resume restores full memory and filesystem.",
   "note": "pause()/resume() is a full VM checkpoint (memory+processes+filesystem) that survives a stop; files are not lost. Card's persistent_disk:false contradicts its own pause_resume:true and snapshot fields. Correct to true, with the caveat that it's opt-in checkpoint/pause-resume (and named snapshots/forks), not a permanently-attached separate disk (no volume_attach).",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://docs.superserve.ai/llms-full.txt",
   "quote": "system: \"You are a coding assistant with a Linux sandbox.\"",
   "note": "Superserve is a headless Firecracker microVM sandbox for code exec/agents (exec, files, templates from OCI images); no VNC/RDP/streamed GUI desktop is offered or documented anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://docs.superserve.ai/llms-full.txt",
   "quote": "cloud-agent-artifacts.s3.us-east-1.amazonaws.com - screenshot and recording uploads",
   "note": "The only 'screenshot' reference is Cloud Agent artifact uploads (e.g. browser-driven CI runs), not a first-party API to drive a desktop via screenshots+clicks. No computer-use / desktop-control API is documented; consistent with desktop:false (no GUI to control).",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/lifecycle",
   "quote": "It's a cap on active time, not idle time. Running work doesn't reset it, so a task still going when the window elapses is paused mid-run.",
   "note": "Auto-pause (timeoutSeconds) is opt-in and keyed to cumulative active seconds, not idleness; an idle-but-running sandbox is not detected/stopped. No separate idle-detection feature exists.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/preview-urls",
   "quote": "Preview URLs route a hostname such as `https://3000-{sandbox-id}.sandbox.superserve.ai` to a process listening inside your sandbox.",
   "note": "Inbound access is exclusively via shared-hostname HTTPS preview URLs, not a per-sandbox public IPv4 address; no public IPv4 is offered or mentioned anywhere in networking docs.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://api.superserve.ai/billing/pricing/public",
   "quote": "vcpu, memory_gib, storage_gib meters exist",
   "note": "The public billing API and pricing page only meter vCPU/RAM/storage; templates/build-spec require a linux/amd64 OCI base image with no GPU option; no GPU instance type, pricing, or docs exist anywhere in the product.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.superserve.ai/templates/build-spec",
   "quote": "Must be a **linux/amd64** image",
   "note": "Sandboxes are built exclusively from Linux OCI base images (linux/amd64); no Windows base image or Windows machine type is offered.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.superserve.ai/templates/build-spec",
   "quote": "Must be a **linux/amd64** image",
   "note": "Same evidence as windows: Firecracker microVM sandboxes only run linux/amd64 OCI images; macOS is only referenced as an allowed *client/controller* OS for reaching Superserve (e.g. Cursor guide), never as a sandboxed machine type.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://docs.superserve.ai/templates/build-spec",
   "quote": "Must be a **linux/amd64** image",
   "note": "Build-spec explicitly restricts templates to linux/amd64; no arm64 base image or machine type is documented anywhere.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://raw.githubusercontent.com/superserve-ai/sandbox/refs/heads/main/LICENSE",
   "quote": "Open Core Ventures Source Available License (OCVSAL) version 1.0 ... Using software and associated documentation files (the \"Software\") in production requires a valid commercial agreement from the copyright holder.",
   "note": "The core sandbox repo (superserve-ai/sandbox, source of the OpenAPI spec) is source-available, not OSI open source; production use needs a paid commercial agreement. Other public superserve-ai repos (langchain-superserve, guides) are example/integration code, not the core product.",
   "checked": "2026-09-30"
  },
  "private_network": {
   "value": false,
   "source": "https://docs.superserve.ai/sandbox/networking",
   "quote": "By default, a sandbox can reach any public IP on the internet. The platform always blocks egress to private, link-local, and loopback ranges regardless of your allow rules.",
   "note": "Networking docs cover only an egress allow/deny-list to public destinations and per-port preview access; there is no VPC/private-network peering or sandbox-to-sandbox private network feature documented; private/link-local ranges are always blocked, not offered as a reachable private network.",
   "checked": "2026-09-30"
  },
  "fast_boot": {
   "value": true,
   "source": "https://www.computesdk.com/benchmarks",
   "quote": "burst of 100: p95 1464 ms, 100% started",
   "note": "ComputeSDK sandbox benchmark 2026-09-25",
   "checked": "2026-09-25"
  },
  "usage_api": {
   "value": true,
   "source": "https://docs.superserve.ai/api-reference/billing/get-timezone-aware-billing-usage-chart-buckets",
   "quote": "A public billing API (effective 2026-06-17) with meter data for vcpu, memory_gib, storage_gib tracked per sandbox per team. Rate card shows $0.000014/vCPU-s and $0.0000045/GiB-s, allowing cost calculation from usage.",
   "note": "granularity: per-sandbox; cost: yes; The documented endpoint retrieves billing usage chart buckets scoped to team/sandbox. The public pricing API and the usage metrics endpoint are both explicitly listed in the card sources and documented in Superserve's billing API reference.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://docs.superserve.ai/",
 "locations_quote": "Regions not documented (API is cell-based). Sandbox IDs include a region-tag prefix (e.g., sb-use-uuid) but available regions are not listed in pricing, docs, or API reference.",
 "locations_checked": "2026-10-01"
}