{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "tencent-agent-runtime",
  "checked": "2026-09-30",
  "company": "Tencent Holdings Limited (Tencent Cloud — Agent Sandbox / Agent Runtime product line)",
  "ownership": {
   "value": "subsidiary",
   "parent": "Tencent Holdings Limited",
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境，支持代码执行、浏览器操作、桌面操作等能力。"
  },
  "stage": {
   "value": "public",
   "source": "https://www.tencent.com/en-us/investors.html",
   "quote": "Tencent Holdings Limited (SEHK 700) is a publicly listed, diversified internet, technology and entertainment company.",
   "confidence": "high",
   "note": "Agent Runtime / Agent Sandbox is a product line inside Tencent Cloud, itself a business segment of Tencent Holdings Limited (HKEX: 0700), a publicly traded parent company — not an independently funded startup. No separate funding round applies to this product."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "subsidiary",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": null,
   "source": ""
  },
  "note": "Tencent Agent Runtime / Agent Sandbox is a product within Tencent Cloud, a business segment of Tencent Holdings Limited — a publicly traded (HKEX: 0700), diversified Chinese technology conglomerate, not an independently financed startup. As such, standard startup-funding fields (accelerators, funding rounds, investors) do not apply; ownership is recorded as subsidiary of Tencent Holdings Limited, stage as public. Product-level revenue is not broken out publicly, so revenue is left unknown rather than reporting the whole-company figure as if it were this product's revenue (per task instructions for products of a bigger/public company)."
 },
 "id": "tencent-agent-runtime",
 "name": "Tencent Cloud Agent Runtime — Agent Sandbox",
 "url": "https://cloud.tencent.com/document/product/1814/133249",
 "category": "agent-sandbox",
 "isolation": null,
 "modes": [
  {
   "key": "on-demand",
   "label": "Agent Sandbox allocated runtime",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "vm"
   },
   "pricing": "resource",
   "vcpu_h": 0.043454327326,
   "ram_gib_h": 0.013411829422,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    0.5,
    2
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": 32,
   "max_ram_gib": 64,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": 1,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": " Native CNY public list/reference quote; rates converted using fx.json. Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion."
  },
  {
   "key": "elastic-deployment",
   "label": "Elastic Deployment beta",
   "flags": [
    "beta",
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "note": "Shanghai and Hong Kong only; stable HTTPS endpoint, autoscaling, min/max instances, per-instance request concurrency, STOP/PAUSE idle policy and session affinity. No separate deployment tariff was found."
  }
 ],
 "storage": {
  "included_disk_gib": 15,
  "disk_gib_month": 0.228448161148,
  "disk_billed_when_stopped": true,
  "snapshot_gib_month": 0.228448161148,
  "paused_ram_billed": true,
  "volume_limits": "Up to 10 StorageMounts per tool and per instance; at most one distinct ReadWriteOnce data volume per sandbox; volume templates are not allowed in instance-level mounts."
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": 50,
   "max_session_h": null,
   "max_vcpu": 32,
   "max_ram_gib": 64,
   "sizes_allowed": null,
   "note": "Unknown quotas are not confirmed unlimited. ",
   "start_rate_limit": "StartSandboxInstance 100 requests/second per default Cloud API quota; tool creation 20/s; pause/resume 20/s"
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "mem",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": true,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": true,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "asia"
  ],
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": true,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "isolation": "vm",
  "image_oci": true,
  "android": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "both",
  "ingress_rules": true,
  "guest_firewall": true,
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "secret_proxy": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Pause/snapshot storage: \"Agent 沙箱支持暂停运行中的实例，暂停期间 CPU、内存停止计费，保留状态所需存储继续计费\" (CPU/RAM stop billing while paused; the storage that keeps the state keeps billing; doc 1814/133249, updated 2026-10-10). 休眠态存储 is 0.0021 CNY/GiB-h (~$0.228/GiB-month, same as the system disk), and the 15 GiB free allowance applies only while running: \"对于暂停后处于休眠状态的沙箱实例，系统盘无免费额度\". Billed capacity for a pause with memory is \"系统盘实际使用量 + 实例声明内存规格\" (disk used + declared RAM), without memory just disk used; the engine prices only the snapshot GiB, so add the declared RAM to it for memory pauses. Max 20 paused instances per account/region.",
  "Default aggregate CPU 50 and RAM quota apply in addition to instance count; card cannot encode resource-pool quota.",
  "Default regional memory pool is 100 GiB as well as 50 vCPU; fifty 4/8 instances exceed both.",
  "Unknowns remain null, not free; generic infrastructure modes are opt-in alt.",
  "Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.",
  "VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.",
  "Residency: Chinese Tencent catalog only. Beijing is a region per the changelog: \"北京地域支持自定义沙箱\" (2026-02-10) and \"Android World 沙箱在北京地域可创建和使用\" (2026-06-01, doc 1814/123809); Shanghai likewise. Hong Kong comes from the Elastic Deployment doc, ap-guangzhou appears in the MCP endpoint. No EU region.",
  "Egress / public traffic: the billing page lists only CPU, memory, system disk, pause and startup acceleration; no network or egress fee is published (re-checked 2026-09-28). egress_gib stays null (unknown, not free).",
  "SSH: not offered in the docs. Access is via the E2B-compatible API (port 49999), filesystem/command API (49983) and a browser WebShell (ttyd), VNC browser and VS Code on port 9000 (All-In-One sandbox, doc 1814/130978). ssh set false.",
  "Session timeout: standard sandbox tools default 5 min, max 24 h; mobile sandboxes up to 15 days. Custom sandboxes with Persistent=true skip timeout reclamation: \"Persistent=true 的实例不受 timeout 回收限制\" (doc 1814/132338), so 24/7 runs work there; the billing page prices a 7×24 常驻运行 month (2 vCPU / 4 GiB / 50 GiB = 732.02 CNY)."
 ],
 "sources": [
  "https://cloud.tencent.com/document/product/1814/133249",
  "https://cloud.tencent.com/document/product/1814/123815",
  "https://cloud.tencent.cn/document/product/1814/123828",
  "https://cloud.tencent.com/document/product/1814/130978",
  "https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/index.cs.html",
  "https://cloud.tencent.com/document/product/1814/123809",
  "https://cloud.tencent.com/document/product/1814/132338"
 ],
 "fleet": {
  "default_max_instances": 50,
  "default_max_vcpu": 50,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": null,
  "tiers": "Per root account per region: 50 running+idle instances, 50 aggregate CPU cores, 100 GiB RAM, 10 sandbox tools, 20 paused instances. Online consultation for increase.",
  "notes": "All quotas checked simultaneously, so 50 is count cap, not 50 arbitrary-size active machines. At 4 vCPU/8 GiB only 12 fit default compute pool; 50/300/1,000 that size need increase. View quotas/usage in Agent Sandbox console. Numeric GPU/default KYC and review time unestablished.",
  "sources": [
   "https://cloud.tencent.com/document/product/1814/123815"
  ],
  "researched": "2026-09-28",
  "prewarm_limits": "CreatePreCacheImageTask 20 requests/second; maximum 50 simultaneous image-prewarm tasks per user per region, after which tasks queue."
 },
 "audit_2026_09_29": {
  "applied": 14,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 5
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/137830",
   "quote": "PAUSE：保留沙箱实例状态，并在后续请求到来时恢复，适合需要保留 Workspace 或进程状态的场景。",
   "note": "Translation: 'PAUSE: keeps the sandbox instance state and resumes it when a later request arrives; for cases that need to keep Workspace or process state.' Trigger: Elastic Deployment (beta; Shanghai/Hong Kong only) IdleTimeoutSeconds + IdleAction=PAUSE (alternative STOP releases). Memory included: pause = snapshot of 'frozen process memory and filesystem state' (doc 129691: '系统将之前冻结的进程内存和文件系统状态原样还原'). Changelog 2026-04-09 also says plain sandbox instances got idle auto-pause + auto-resume on data request as public beta ('沙箱实例以公测形式支持空闲自动暂停、数据请求触发自动恢复'), but the instance lifecycle doc still says expiry -> stop ('到期 → 停止'). Standalone instances that time out are stopped, not saved.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/129691",
   "quote": "从已有快照恢复沙箱实例。系统将之前冻结的进程内存和文件系统状态原样还原。",
   "note": "Translation: 'Restore a sandbox instance from an existing snapshot. The system restores the previously frozen process memory and filesystem state as-is.' On-demand = PauseSandboxInstance / ResumeSandboxInstance API, agr CLI and E2B pause() (doc 132323); memory included. In-place only: the public API has no create-snapshot/fork/clone action, so you cannot boot new instances from your own pause snapshot (the doc mentions '从已保存的快照创建新实例' but no API exposes it). Paused state is billed as storage at 0.0021 CNY/GiB-h (doc 133249, 2026-10-10); max 20 paused instances per account/region. Console 'clone custom sandbox' copies config, not state.",
   "checked": "2026-10-14"
  },
  "harness_api": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/130978",
   "quote": "@anthropic-ai/claude-code Claude Code CLI @openai/codex OpenAI Codex CLI @google/gemini-cli Gemini CLI",
   "note": "All-In-One sandbox preinstalls Claude Code, Codex and Gemini CLI (agent_harnesses), but the API catalog (tools, instances, deployments, registry, session store, keys) has no action to run a harness with a prompt / stream its events. 'Session management' (doc 138347) is a cloud store for an agent app's conversation events and state, not a harness driver. DeepSeek Harness appears only as cookbook samples.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/132217",
   "quote": "如果目标域名、端口、路径或方法不在策略允许范围内，请求会被 Tool 级或 Instance 级 NetworkPolicy 拦截。",
   "note": "Translation: 'If the target domain, port, path or method is outside the policy's allowed scope, the request is blocked by the Tool-level or Instance-level NetworkPolicy.' Example policy: DefaultDecision deny + Rules Hosts ['api.example.com'] Ports ['443'] (set via Cloud API UpdateSandboxTool/UpdateSandboxInstance or E2B metadata x-network-policy; changelog 2026-04-15 says gray release '当前按灰度范围开放'). Plus NetworkMode (doc 132216): PUBLIC, SANDBOX ('不提供 Internet 或 VPC 出站' = no internet/VPC egress) and VPC mode with your own subnet + security groups (IP/port egress rules).",
   "checked": "2026-09-29",
   "level": "both"
  },
  "egress_http_rules": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/123809",
   "quote": "沙箱工具和实例支持 NetworkPolicy 配置，可按主机、端口、路径、HTTP 方法和表达式定义流量决策与通知钩子；当前按灰度范围开放。",
   "note": "Translation: 'Sandbox tools and instances support NetworkPolicy, defining traffic decisions and notification hooks by host, port, path, HTTP method and expressions; currently open on a gray-release basis.' (2026-04-15). Not in the public API data-structure page yet (doc 124823), so rule schema beyond Hosts/Ports is not documented publicly.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/132216",
   "quote": "NetworkMode 决定出站网络边界，AuthMode 决定访问实例端口时是否需要认证。两者相互独立，可以组合使用。",
   "note": "Translation: 'NetworkMode decides the outbound boundary, AuthMode decides whether access to instance ports needs authentication; independent, can be combined.' AuthMode DEFAULT / TOKEN (token required) / PUBLIC (business ports anonymous, management port 49983 still needs sandbox access token) / NONE. Ports routed via {port}-{sandbox-id}.{region}.tencentags.com with X-Access-Token / access_token / signed access (doc 132313); business ports declared in CustomConfiguration.Ports; VPC mode uses your security groups.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": null,
   "quote": null,
   "note": "Doc 123813: '虚拟化隔离：每个沙箱拥有独立内核' (virtualized isolation: each sandbox has its own kernel; Cube secure-sandbox microVM). Commands can run as root (envd default user root, doc 137275). Not documented explicitly.",
   "checked": "2026-09-29",
   "derived": true
  },
  "volume_attach": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/138791",
   "quote": "通过存储模板（VolumeTemplate）和数据卷（Volume）两级资源模型，您可以将对象存储（COS）或文件存储（CFS）中的目录，或 AgentCBS 云硬盘挂载到沙箱工具或沙箱实例，复用存储配置并管理数据卷的生命周期。",
   "note": "Translation: 'With VolumeTemplate and Volume resources you can mount directories in COS object storage or CFS file storage, or AgentCBS cloud disks, onto sandbox tools or instances.' Also StorageMounts (COS, CFS, image, AgentBucket/SMH, JuiceFS gray, TurboCFS gray), up to 10 mounts per tool.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/138791",
   "quote": "读写多（ReadWriteMany）或只读多（ReadOnlyMany）的数据卷可挂载到多个沙箱工具或实例，避免重复配置。",
   "note": "Translation: 'ReadWriteMany or ReadOnlyMany volumes can be mounted onto multiple sandbox tools or instances.' Read-write or read-only; ReadWriteOnce also exists. Storage mount doc 132215 states goal '跨实例共享' (cross-instance sharing) with CFS for shared working dirs.",
   "checked": "2026-09-29"
  },
  "docker_inside": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/129691",
   "quote": "本地已安装 Docker...构建镜像时请指定平台：docker build --platform=linux/amd64",
   "note": "Docker is used by the customer to build/push the custom sandbox image before deployment; the docs never describe a Docker/container runtime or socket available *inside* the running sandbox guest itself (the guest runs the single container from the supplied image under a lightweight microVM kernel). Not offered: outside the documented scope.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123813",
   "quote": "虚拟化隔离：每个沙箱拥有独立内核，轻量级 Guest OS（镜像 128M，内存 20M），实现环境、会话、网络、存储的全面隔离。",
   "note": "Sandboxes are described as lightweight single-purpose microVMs (128M image, 20M memory) running one container image; no /dev/kvm or nested-VM capability is documented. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123815",
   "quote": "Browser浏览器访问、网页自动化、页面交互",
   "note": "The Browser sandbox tool exposes a plain browser for automation (Playwright/CDP); no stealth/fingerprint-evasion or anti-bot-detection capability is documented anywhere in the Agent Runtime docs. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境，支持代码执行、浏览器操作、桌面操作等能力。",
   "note": "Agent Runtime is a sandbox/runtime infrastructure product (code execution, browser, desktop) for the customer's own agent; no CAPTCHA-solving capability appears anywhere in the docs (the only 'captcha' hit on cloud.tencent.com is Tencent's unrelated standalone Captcha product). Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://cloud.tencent.com/document/product/1814/132216",
   "quote": "PUBLIC可访问 Internet 和公网服务，下载依赖、调用第三方 API、访问公网服务端口",
   "note": "PUBLIC network mode gives outbound internet access through Tencent Cloud's shared datacenter egress; no residential/mobile IP option and no dedicated/static IP feature is documented.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "mem",
   "source": "https://cloud.tencent.com/document/product/1814/129691",
   "quote": "从已有快照恢复沙箱实例。系统将之前冻结的进程内存和文件系统状态原样还原。",
   "note": "Pause/resume (snapshot_on_demand) and idle auto-pause (snapshot_auto) restore frozen process memory plus filesystem state, i.e. memory+disk snapshotting with running processes restored.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123809",
   "quote": "自定义沙箱克隆：控制台支持克隆已有自定义沙箱，并在创建页自动带入镜像、环境变量、命令、端口、资源、健康检查、存储和标签配置。",
   "note": "Console 'clone' only copies the Tool configuration (image, env, ports, etc.) to prefill a new Tool definition; it does not clone a machine's live/paused state into a new running instance. No API exposes creating a new instance from another instance's state/snapshot, so machine forking is not offered.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123809",
   "quote": "自定义沙箱克隆：控制台支持克隆已有自定义沙箱，并在创建页自动带入镜像、环境变量、命令、端口、资源、健康检查、存储和标签配置。",
   "note": "Depends on fork, which is not offered (config-only clone, no state cloning); therefore cloning a running machine without stopping it is also not offered.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123809",
   "quote": "自定义沙箱克隆：控制台支持克隆已有自定义沙箱，并在创建页自动带入镜像、环境变量、命令、端口、资源、健康检查、存储和标签配置。",
   "note": "No fork capability exists at all (config-only clone), so cloning with memory/process state included is not offered.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/132217",
   "quote": "agr instance update 当前只公开 --timeout 和 --metadata，不提供网络相关参数。",
   "note": "The only documented instance-update fields are timeout and metadata; there is no API/CLI parameter to change a running instance's CPU/RAM allocation without recreating it (resource specs are fixed at Tool/creation time per doc 123815).",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境，支持代码执行、浏览器操作、桌面操作等能力。",
   "note": "Agent Runtime provides sandbox infrastructure (code exec, browser, desktop, computer-use) for running the customer's own agent/harness; there is no first-party API that drives a Tencent-owned task/browsing/research agent. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/1814/132251",
   "quote": "AGS 提供托管的远程 HTTP MCP 服务...将 Agent Sandbox Code MCP 添加到 Cursor 或 Claude Desktop...url\": \"https://mcp.ap-guangzhou.tencentags.com/code?toolname=code-interpreter-v1&mode=auto\"",
   "note": "Tencent hosts a first-party remote HTTP MCP server (mcp.{region}.tencentags.com) exposing sandbox tools (run_code, run_command, write_file, read_file, create_sandbox, delete_sandbox, etc.) for MCP clients like Cursor/Claude Desktop; a dedicated Code-MCP Server doc (123854) also exists.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/132313",
   "quote": "tencentags.com，{region} 为您的地域标识（如 ap-guangzhou）...访问凭证根据 Instance 认证模式准备 X-Access-Token、access_token 或签名",
   "note": "Ports are reached through a provider-managed HTTPS domain ({port}-{sandbox-id}.{region}.tencentags.com) with token-based auth, not a public IPv4 address assigned to the machine.",
   "checked": "2026-09-30"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/129691",
   "quote": "所有自定义环境变量必须通过 API 的 Env 参数显式传入。",
   "note": "Secrets/credentials are passed as env vars via the API's Env parameter (or CAM role-based access for the management API itself); no first-party proxy that injects credentials into arbitrary outbound HTTP calls is documented.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/132216",
   "quote": "PUBLIC可访问 Internet 和公网服务",
   "note": "Outbound access in PUBLIC mode uses shared platform egress; no fixed/static outbound IP option is documented for the sandbox/instance.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123815",
   "quote": "沙箱工具适用任务：Browser、Code Interpreter、SWE-bench、OSWorld、All-In-One、Mobile、Android World、Custom...CPU 支持0.5,1,2,4,8,16,32核的多规格",
   "note": "The full catalog of sandbox tool types and their CPU/RAM specs lists no GPU option; gpu_types is empty in the card. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/137275",
   "quote": "AGS 运行环境建议使用 linux/amd64 架构...也建议显式指定 --platform=linux/amd64，避免构建出 arm64 镜像导致沙箱运行失败。",
   "note": "Docs explicitly warn that building an arm64 image causes the sandbox to fail to run; only linux/amd64 is supported.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境",
   "note": "Agent Runtime is a hosted Tencent Cloud managed service (console + Cloud API); there is no distributable software package to run on your own infrastructure. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境",
   "note": "No bring-your-own-cloud / deploy-into-customer-account offering is documented; the service runs only inside Tencent Cloud's own regions/VPCs. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent 沙箱为 Agent 提供隔离、安全、可控的运行环境",
   "note": "No OSI-licensed core-product repository is referenced anywhere in the docs; only client SDKs/CLI wrappers (E2B-compatible) are used against the closed managed service. Not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": 24,
   "source": "https://cloud.tencent.com/document/product/1814/123820",
   "quote": "生命周期：单个沙箱实例在创建后可存续的最长时间，超时将自动销毁...默认值：5m。最长24小时。",
   "note": "Standard sandbox tool instance lifecycle caps at 24h (default 5m). Exception: custom sandboxes can run with Persistent=true, which doc 1814/132338 says is exempt from timeout reclamation (\"Persistent=true 的实例不受 timeout 回收限制\"), and the billing page (doc 133249) has a 7×24 常驻运行 30-day example. The card keeps 24 because the engine cannot scope the exemption to persistent custom sandboxes (logged in engine-needs). Mobile sandboxes run up to 15 days.",
   "checked": "2026-10-14"
  },
  "ssh": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/130978",
   "quote": "代码执行 49999 兼容 E2B 协议，支持 Python / JS 等多语言 | 远程浏览器 9000/novnc/ 基于 VNC 的浏览器可视化界面 | VSCode 编辑器 9000/vscode/ code-server Web IDE | WebShell 终端 9000/ttyd/ 基于 ttyd 的网页终端 | 终端 & 文件系统操作 49983 文件系统与命令操作接口",
   "note": "The All-In-One sandbox's own doc lists every exposed access surface (E2B-compatible code exec API on 49999, filesystem/command API on 49983, NoVNC browser, VSCode web IDE, and a ttyd-based WebShell terminal). No SSH port or SSH access method is listed anywhere in the docs; terminal access is via the ttyd WebShell over HTTPS, not SSH. Confirms ssh:false.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123813",
   "quote": "虚拟化隔离：每个沙箱拥有独立内核，轻量级 Guest OS（镜像 128M，内存 20M），实现环境、会话、网络、存储的全面隔离。",
   "note": "Translation: 'Virtualization isolation: each sandbox has its own kernel, a lightweight Guest OS (128M image, 20M memory), achieving full isolation of environment, session, network and storage.' The product is a Cube-microVM-based Linux sandbox runtime (guest OS images are ~128MB Linux images; sandbox tool catalog in doc 1814/123815 and OSWorld/All-In-One docs reference Ubuntu desktops and Linux container images only). There is no macOS guest option anywhere in the docs — macOS is outside what this product offers, confirming macos:false.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": true,
   "source": "https://www.tencentcloud.com/solutions/compliance-program",
   "quote": "SOC 1 System and Organization Controls Report View Details SOC 2 System and Organization Controls Report View Details SOC 3 System and Organization Controls Report View Details",
   "note": "Tencent Cloud's platform-wide Compliance Program page lists SOC 1/2/3 reports among its obtained third-party audit certifications; Agent Runtime runs on Tencent Cloud infrastructure and is covered by the platform-level attestation.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": true,
   "source": "https://www.tencentcloud.com/solutions/compliance-program",
   "quote": "HIPAA Health Insurance Portability and Accountability Act View Details",
   "note": "HIPAA is listed as one of Tencent Cloud's platform-wide regional/industry compliance items on the official Compliance Program page. No Agent Runtime-specific BAA document was found in the ~15 min research window, so this is treated as platform-level HIPAA eligibility inherited by the service, medium confidence.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://cloud.tencent.com/document/product/598/34567",
   "quote": "创建SAML身份提供商 ... 创建用户OIDC配置 ... 创建用户SAML配置 ... 禁用用户SSO",
   "note": "Tencent Cloud's CAM (Cloud Access Management) API, which governs access to all Tencent Cloud products including Agent Runtime, exposes SAML identity-provider and OIDC configuration endpoints plus a 'disable user SSO' action, confirming SAML/OIDC single sign-on support.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/133249",
   "quote": "Agent Sandbox documentation lists no REST API, SDK, or CLI endpoint for querying billable usage (CPU-seconds, GB-seconds, cost) per sandbox or by tag/label. Billing pages document pricing rates only, not usage/cost reporting.",
   "note": "granularity: account-only; cost: no; Card features, caveats, and API catalog mention quotas/limits and pricing but omit any usage API. Tencent Cloud billing is accessed via the console dashboard only, not programmatically for per-resource granularity.",
   "confidence": "high",
   "checked": "2026-10-01"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123809",
   "quote": "自定义沙箱在北京地域开放，用户可在北京地域查看自定义沙箱入口并创建自定义沙箱。",
   "note": "Translation: 'Custom sandboxes opened in the Beijing region.' The product is only in the Chinese-site catalog (no tencentcloud.com international doc for product 1814); the changelog and docs name Shanghai, Beijing, Hong Kong (Elastic Deployment) and ap-guangzhou (MCP endpoint) only. The quota page (doc 123815) lists no regions. No EU region is documented.",
   "checked": "2026-10-14"
  },
  "windows": {
   "value": false,
   "source": "https://cloud.tencent.com/document/product/1814/123815",
   "quote": "Browser 浏览器访问、网页自动化、页面交互 2C / 2000MiB 1GiB Code Interpreter 脚本执行、代码运行、临时计算 2C / 1000MiB 1GiB SWE-bench 软件工程任务评测和代码补丁验证 4C / 8GiB 1GiB OSWorld Ubuntu 桌面和图形界面操作 4C / 8GiB 4GiB",
   "note": "The sandbox tool list is Browser, Code Interpreter, SWE-bench, OSWorld (Ubuntu desktop), All-In-One, Mobile, Android World and Custom; no Windows type, and the changelog (doc 123809) has no Windows entry. Custom images must be linux/amd64 (doc 137275).",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "CN",
   "state": null,
   "city": "Shanghai",
   "provider_region": "ap-shanghai",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Beijing",
   "provider_region": "ap-beijing",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "HK",
   "state": null,
   "city": "Hong Kong",
   "provider_region": "ap-hongkong",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://cloud.tencent.com/document/product/1814/123815",
 "locations_quote": "Shanghai and Hong Kong only; stable HTTPS endpoint, autoscaling, min/max instances, per-instance request concurrency, STOP/PAUSE idle policy and session affinity",
 "locations_checked": "2026-10-14"
}