{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": null,
  "hipaa": null,
  "sso": null,
  "gpu": false,
  "arm64": null,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": true,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": null,
  "secret_proxy": true,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "volcengine-agentkit",
  "checked": "2026-09-30",
  "company": "ByteDance Ltd. (Volcano Engine / 火山引擎, ByteDance's cloud computing unit)",
  "ownership": {
   "value": "subsidiary",
   "parent": "ByteDance Ltd.",
   "source": "https://en.wikipedia.org/wiki/ByteDance",
   "quote": "Volcano Engine, founded in 2021, is ByteDance's cloud computing unit."
  },
  "stage": {
   "value": "subsidiary",
   "source": "https://en.wikipedia.org/wiki/ByteDance",
   "quote": "Volcano Engine, founded in 2021, is ByteDance's cloud computing unit.",
   "confidence": "high",
   "note": "AgentKit is a product on Volcano Engine, itself a cloud business unit of ByteDance (a private company); no independent funding round for Volcano Engine or AgentKit was found, so the stage reflects it being a corporate cloud product line rather than a separately financed startup."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "https://en.wikipedia.org/wiki/ByteDance",
   "quote": "ByteDance is backed financially by Jeff Yass's Susquehanna International Group, Primavera Capital Group, Kohlberg Kravis Roberts, SoftBank Group, Sequoia Capital, General Atlantic, and Hillhouse Capital Group.",
   "note": "No specific dated 'last round' with an amount was found for ByteDance or Volcano Engine; recent public information concerns secondary share-tender valuations, not a new primary funding round."
  },
  "investors": [
   "Sequoia Capital",
   "SoftBank Group",
   "KKR & Co.",
   "Susquehanna International Group",
   "General Atlantic",
   "Hillhouse Capital Group",
   "Primavera Capital Group"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 155000000000,
   "kind": "annual revenue",
   "as_of": "2024",
   "status": "confirmed",
   "basis": "Figure is for the whole of ByteDance Ltd. (parent company); Volcano Engine/AgentKit-specific revenue is not broken out and is unknown.",
   "source": "https://en.wikipedia.org/wiki/ByteDance",
   "quote": "Revenue US$155 billion (2024)"
  },
  "employees": {
   "value": 120000,
   "source": "https://en.wikipedia.org/wiki/ByteDance"
  },
  "note": "Volcano Engine (火山引擎) is ByteDance's public cloud brand, founded in 2021; AgentKit is one of its agent/sandbox products (also resold via BytePlus for international/Asia-Pacific customers). As a subsidiary product line, it has no independent funding history, investors, or revenue disclosure distinct from ByteDance as a whole. ByteDance itself is a private company (Cayman Islands VIE structure) valued at roughly $300 billion as of November 2024, backed by major institutional investors, with founder Zhang Yiming retaining majority voting control; it is not publicly traded."
 },
 "id": "volcengine-agentkit",
 "name": "Volcano Engine AgentKit / veFaaS sandbox",
 "url": "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
 "category": "agent-sandbox",
 "isolation": "container",
 "modes": [
  {
   "key": "sandbox",
   "label": "AgentKit Sandbox tool (mainland China, cn-beijing / cn-shanghai)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "browser": true,
    "isolation": "container",
    "image_oci": true
   },
   "pricing": "resource",
   "vcpu_h": 0.021727163663,
   "ram_gib_h": 0.005472026404,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    2,
    8
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": 2,
   "max_vcpu": 16,
   "max_ram_gib": 128,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Live billing page 2026-09-28: 沙箱模板 CPU 0.0000405 CNY/vCPU/s, 内存 0.0000102 CNY/GB/s, 公网流量 0.8 CNY/GB; converted with fx.json (0.14902 USD/CNY). No disk or storage billing item is listed (\"AgentKit 的费用由资源用量费用与网关实例费用累加得到\"). Unknown: VAT/tax inclusion."
  },
  {
   "key": "agent-runtime",
   "label": "Agent application Runtime (hosts the agent app; mainland China, cn-beijing)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "isolation": null,
    "image_oci": true
   },
   "pricing": "resource",
   "vcpu_h": 0.052239075597,
   "ram_gib_h": 0.008291729422,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Live billing page 2026-09-28: 运行时 CPU 0.000097375 CNY/vCPU/s, 内存 0.000015456 CNY/GB/s, 公网流量 0.8 CNY/GB. \"智能体运行时（Runtime）：承载 Agent 应用运行的实例\" - agent-app hosting, not the code-execution sandbox. Needs a gateway: shared gateway 1 CNY/instance/hour beyond 2 free per account per region (not modelled). Unknown: VAT/tax inclusion.",
   "product_class": "paas"
  },
  {
   "key": "vefaas-direct",
   "label": "Direct veFaaS sandbox tariff not verified (mainland China)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "isolation": "container",
    "image_oci": true
   },
   "pricing": "resource",
   "vcpu_h": 0.021727163663,
   "ram_gib_h": 0.005472026404,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 0.001,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": " Native CNY public list/reference quote; rates converted using fx.json. Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion."
  },
  {
   "key": "sandbox-byteplus",
   "label": "AgentKit Sandbox on BytePlus (Asia Pacific, Johor ap-southeast-1), USD list",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "pricing": "resource",
   "vcpu_h": 0.0351,
   "ram_gib_h": 0.0081,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "min_vcpu": 2,
   "max_vcpu": 16,
   "max_ram_gib": 128,
   "ram_per_vcpu": [
    2,
    8
   ],
   "granularity_s": 1,
   "min_billed_seconds": null,
   "start_fee": 0,
   "note": "USD native (no FX): 0.00000975 USD/vCPU/s, 0.00000225 USD/GB/s, egress 0.081 USD/GB. Billing started 2026-08-24 (UTC+8). The size limits are assumed to be the same as the Chinese docs (the Limits page matches)."
  },
  {
   "key": "agent-runtime-byteplus",
   "label": "Agent Runtime on BytePlus (Asia Pacific, Johor), USD list",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "isolation": null,
    "image_oci": true
   },
   "pricing": "resource",
   "vcpu_h": 0.0684,
   "ram_gib_h": 0.0108,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "USD native (no FX): 0.000019 USD/vCPU/s, 0.000003 USD/GB/s (docs.byteplus.com/en/docs/agentkit/Billing_items). Agent-app hosting runtime, not the code-execution sandbox. Shared gateway 0.192 USD/unit/hour beyond 2 free per account per region (not modelled).",
   "product_class": "paas"
  }
 ],
 "storage": {
  "included_disk_gib": 10,
  "disk_gib_month": 0,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": 0,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": 0.119216261526,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Pay as you go",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": 100,
   "max_session_h": 24,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "100 concurrent sandbox instances is the per-template default (\"单个沙箱模板的最大并发沙箱实例数量 100 是，如需提升配额，请前往 配额中心 申请\"), raisable through the quota center; an account can create 20 sandbox templates per region (also raisable). Lifetime: 24 h self-serve (\"单个沙箱实例的最大生命周期时长 24 小时 否\"), default TTL 28800 s (8 h); up to 7 days through an account manager. Source: https://docs.volcengine.com/docs/agentkit/Limits?lang=zh (checked 2026-10-14). Other unknown quotas are not confirmed unlimited."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": null,
  "gpu": false,
  "gpu_types": [],
  "snapshot": "fs",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": true,
  "auto_stop_idle": false,
  "max_session_h": 24,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": true,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "regions": [
   "asia"
  ],
  "soc2": null,
  "hipaa": null,
  "sso": null,
  "isolation": "container",
  "image_oci": true,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "egress_allowlist_level": "ip",
  "ingress_rules": true,
  "secret_proxy": "ai-only",
  "volume_attach": true,
  "volume_shared": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "fork_running": false,
  "memory_snapshot_fork": false,
  "wake_on_request": true,
  "live_resize": false,
  "own_agent_api": true,
  "mcp_server": true,
  "lang_python": true,
  "lang_node": true,
  "egress_http_rules": false,
  "eu_data_residency": false,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "CPU accounting described as resource usage but active CPU utilization not proven; allocation assumed conservatively.",
  "veFaaS direct sandbox tariff may differ from AgentKit Sandbox; separate direct rate unknown.",
  "Worked example assumes resources are released between active windows unless a retained-instance scenario is explicitly discussed.",
  "VAT basis: Unknown: reviewed pricing source does not explicitly establish VAT/tax inclusion.",
  "Residency: China catalog; specific sandbox region list not captured; no EU residency guarantee established.",
  "Disk: the AgentKit billing page lists no disk/storage item (fees = resource usage + gateway instances), so disk is encoded as $0; the sandbox disk size limit is not published.",
  "Paused-sandbox / snapshot retention price not published (veFaaS documents pause/resume and volumes via the E2B-compatible API); snapshot_gib_month stays null.",
  "Region: documentation and examples are cn-beijing (华北2 北京) on a Chinese account; cn-shanghai is also open. Treat as mainland-China only (local account / ICP rules), plus BytePlus Johor.",
  "SSH: not documented; access is via the E2B-compatible API (commands, PTY, files). Desktop: the AIO Sandbox browser tool is documented, a full desktop is not.",
  "Agent Runtime is an agent-app hosting runtime (not the sandbox tool); it is priced without an opt-in flag but classed as an app platform. Its gateway fee (1 CNY/h per shared gateway beyond 2 free per region) is not modelled.",
  "Volcano Engine (China) needs real-name verification and a prepaid balance. Usage is settled hourly from the balance. Resources are shut down 24 h after the account goes into arrears and deleted after 168 h. Creating a gateway requires a balance above 100 CNY; BytePlus requires a balance above USD 5 to buy resources.",
  "Billing history: AgentKit was free in public beta until 2026-05-27 (China) and 2026-08-24 (BytePlus). A metering upgrade on 2026-08-13 fixed 'missed instance states'. Aug 13-31 usage was billed at 25% as a transition, and full metered usage applies from 2026-09-01, with bills expected to rise.",
  "A warm pool (预热池) keeps idle ready instances billed at full sandbox rates. The 'deleting' state is also billed until the instance is fully destroyed.",
  "Agent Runtime with a minimum instance count bills those instances continuously, even with no traffic.",
  "AgentKit Harness (CLI toolchain) has been invite-only since 2026-06-19. The dedicated gateway (small_x1 7.90 CNY/h) was in internal test per the 2026-08-13 notice and is now on the price page.",
  "VAT: Volcano Engine (mainland China) list prices INCLUDE VAT unless stated otherwise; AgentKit is invoiced as an IT technical service at 6% VAT, so the CNY-based rates are ~5.7% above an ex-tax comparison (price / 1.06). BytePlus USD prices: tax basis not stated. Supersedes the \"VAT basis: Unknown\" caveat.",
  "Regions: AgentKit is open in cn-beijing (华北2 北京) and cn-shanghai (华东2 上海) per the Available regions page (\"AgentKit当前的开服地域如下 ... 华北 2 (北京) cn-beijing 华东2（上海） cn-shanghai\"; release notes: \"AgentKit服务上线华东2（上海）地域\"). The card prices both at the single CNY list on the billing page; a Shanghai-specific tariff was not seen. Checked 2026-10-14.",
  "Concurrency: the 100 cap is per sandbox template, not per account, and can be raised in the quota center (配额中心); with the default 20 templates per region an account could run more by spreading work across templates. The card models 100 as the plan cap. Source: https://docs.volcengine.com/docs/agentkit/Limits?lang=zh (checked 2026-10-14).",
  "Lifetime: 24 h is the self-serve maximum (the Limits page marks it not adjustable), but the Codex-in-sandbox guide says \"取值180秒（3分钟）～ 86400秒（24小时）。如需将生命周期延长至最大604800秒（7天），请联系客户经理申请。\" (up to 7 days via an account manager). Default TTL 28800 s (8 h). Source: https://docs.volcengine.com/docs/agentkit/RunningCodexinasandboxviaAgentKitCLI?lang=zh (checked 2026-10-14)."
 ],
 "sources": [
  "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
  "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
  "https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/index.cs.html",
  "https://docs.volcengine.com/docs/agentkit/Browser_sandbox_tool_example?lang=zh",
  "https://docs.volcengine.com/docs/agentkit/Available_regions?lang=zh",
  "https://docs.volcengine.com/docs/agentkit/Limits?lang=zh"
 ],
 "audit_2026_09_29": {
  "applied": 20,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 6
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "启用快照功能后，平台将会在沙箱模板实例到期前自动创建快照，保存实例数据和环境，可用于后续恢复实例。恢复操作详见使用快照恢复实例。开启快照功能后，仅在实例到期前由系统触发快照创建操作，主动删除或异常回收的实例不保留。",
   "note": "Gloss: 'once snapshots are enabled, the platform automatically snapshots a sandbox-template instance before it expires, saving instance data and environment for later restore; only expiry triggers it, deleted/abnormally reclaimed instances are not kept.' Opt-in per template (EnableSnapshot: '是否在实例过期前自动创建快照'). Trigger = end of instance lifetime (max 24 h), not idle/stop. Memory: not stated ('数据状态'/data state); the separate veFaaS pause/resume keeps a file-system snapshot and explicitly does NOT keep memory ('Memory data: not retained'), pause is manual and beta/ticket-gated. Restore creates a new instance with a new 60-86400 s lifetime. Snapshot storage price not published. 2026-10-14: the restore page (Using_snapshots_to_restore_instances, updated 2026-09-11) now says both \"平台会在实例到期后自动创建快照\" (after expiry) and \"自动快照 的状态时点为平台在实例到期前创建快照时的实例状态\" (state captured before expiry); the value is unchanged.",
   "checked": "2026-10-14"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Using_snapshots_to_restore_instances?lang=zh",
   "quote": "您可以在调试、升级、变更配置等关键操作前手动创建快照，也可以依赖实例到期前由平台自动创建的快照。",
   "note": "Gloss: 'you can manually create a snapshot before critical operations, or rely on the automatic pre-expiry snapshot.' Added 2026-09-10 (release notes: '支持随时手动为沙箱实例创建快照'). Documented via console button '手动快照' only (no API seen). Limits: requires snapshot feature enabled on the template; 'each manual snapshot can be restored only once' (每个手动快照仅可恢复 1 次); restore spins up a new instance ('从快照恢复出一个新实例'), so no fan-out/fork template. Memory inclusion not stated.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/RunningCodexinasandboxviaAgentKitCLI?lang=zh",
   "quote": "相同的session-id可在多次执行间复用同一个实例（包括工作目录、Codex历史记录等）。",
   "note": "Gloss: 'the same session-id reuses the same instance across executions (incl. working directory, Codex history)'. Also on the page: '--model-name（可选）: 沙箱内Codex使用的模型名称' (model used by Codex inside the sandbox). Code Sandbox preset has Codex CLI built in ('内置 Codex CLI'); the AgentKit CLI (`agentkit sandbox create/exec/web`) configures Codex's model and launches it with a prompt, but the prompt is passed as a shell command (`--command \"codex exec ...\"`), so it is only a thin Codex wrapper, not an event-streaming harness API. Also: Agent Runtime is driven by prompt + session_id (`agentkit invoke \"...\"`, session_id/user_id headers) for hosted VeADK/LangGraph/ADK agents; ArkClaw/Hermes sandboxes have built-in agents reachable via WebChat or a Feishu bot channel. AgentKit Harness CLI (invite-only since 2026-06-19) deploys/invokes Runtime agents. Harnesses: Codex (sandbox), ArkClaw, Hermes Agent, VeADK agents (Runtime). No Claude Code/OpenCode support seen.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/CreateTool_-_Creates_tool?lang=zh",
   "quote": "NetworkConfiguration.VpcConfiguration.SecurityGroupIds.N string[] 可选 示例值：SecurityGroupIds.1=sg-w08tvkc3e****",
   "note": "Private-network mode puts the sandbox in your VPC/subnet with security groups; EnableSharedInternetAccess=false ('工具将使用私有网络中已配置的公网NAT网关出口访问公网') makes egress go through your own NAT (or none, if no NAT). So egress control is IP/port-level via VPC security groups/NAT/ACL, enforced outside the guest. No domain allowlist. Default public mode uses the platform's shared exit with no documented filtering. Same model on veFaaS sandbox apps (VPC + security group; 'Default network interface card to access the public network' can be disabled).",
   "checked": "2026-09-29",
   "level": "ip"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "配置沙箱模板托管资源认证信息，用来控制谁可以访问此沙箱模板托管资源。",
   "note": "Gloss: 'inbound identity auth: controls who can access resources hosted by this sandbox template' - API Key or OAuth JWT (mutually exclusive). Network access can be public (default) or private (VPC only: '私网访问：通过私网访问沙箱模板，安全性更高'). veFaaS sandbox apps expose instances only through configured APIG gateway routes (unified or wildcard domain).",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": "ai-only",
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_model_service?lang=zh",
   "quote": "Proxy API Key 是模型服务对外暴露的统一访问凭证。调用方（如 Agent 或第三方应用）使用该 Key 向模型服务发起请求，由模型服务代理转发至实际的供应商模型，调用方无需直接持有供应商的原始 API Key，实现密钥隔离与统一管控。",
   "note": "Gloss: 'The Proxy API Key is the unified credential exposed by the model service; callers (agents or apps) use it and the model service proxies to the real provider, so callers never hold the provider's original API key.' AgentKit model gateway (needs a gateway instance, billed); supports Ark, OpenAI- and Anthropic-compatible providers; sandbox templates (ArkClaw/Hermes/Code) can pick a model service + Proxy API Key (whereas picking Ark directly 'may risk key leakage'). For non-LLM APIs: the Identity credential store (API Key / OAuth Client in KMS) is fetched by the agent at runtime (secret enters the agent), except MCP tools behind the AgentKit Gateway, where the gateway does '出站凭据注入' (outbound credential injection) - but that path serves Runtime agents and MCP tools only ('仅承载 MCP 工具，不承载沙箱模板'). Plain sandbox env vars otherwise. No SSH/DB/git coverage.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "Volume.create()​ Creates a storage volume.",
   "note": "E2B-compatible Volume API on veFaaS sandbox ('Storage volume management. It supports volume creation, connection, destruction, listing'); veFaaS also mounts FileNAS (up to 10 per function, VPC required). AgentKit sandbox templates mount up to 2 TOS (object storage) bucket paths ('一个沙箱模板最多支持配置 2 个 TOS 挂载点'). No block volumes. Volume billing is by TOS/NAS.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "启用 TOS 挂载：启用后沙箱模板实例对应目录的数据，将存储至 TOS 服务，实现数据持久化和跨实例复用。",
   "note": "Gloss: 'enable TOS mount: data in the instance directory is stored in TOS, for persistence and reuse across instances.' Mount point per local dir can be '读写权限或只读权限' (read-write or read-only); all instances of a template inherit the mount. veFaaS: 'Multiple functions can share a single FileNAS file system to enable file sharing' (NAS, read-write).",
   "checked": "2026-09-29"
  },
  "docker_inside": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "Compatibility overview: Sandbox / Commands / Filesystem / Code Interpreter / Template / Volume",
   "note": "not offered: outside the product's scope — the documented E2B-compatible API surface covers process/command execution, filesystem, code-interpreter and volumes only; no container/Docker-runtime management module is documented inside the sandbox guest.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "The cloud sandbox of veFaaS is compatible with the E2B protocol at the API layer, and supports dynamically injecting the Envd runtime into any sandbox image.",
   "note": "not offered: outside the product's scope — no /dev/kvm or nested-virtualization capability is documented; the sandbox itself is documented as an isolated container runtime.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_images?lang=en",
   "quote": "Computer: A standard Linux desktop/terminal image. It provides a complete Linux operating system environment and supports standard Shell commands and desktop interactions.",
   "note": "veFaaS (the platform AgentKit sandboxes run on) ships a ready-to-use 'Computer' public image with a full desktop environment.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/Advanced_configurations_for_sandbox_applications?lang=en",
   "quote": "The App plaza is now available, providing agent applications including Browser Use Agent, Code Sandbox Agent, and Computer Use Agent for you to try free of charge... It offers a general Agent solution that simulates completing open-ended tasks across various OS environments.",
   "note": "A 'Computer Use Agent' app-plaza template exists on top of the 'Computer' desktop sandbox image, implying screenshot/click-driven desktop control; a dedicated public computer-use API reference page was not located during this pass.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_images?lang=en",
   "quote": "Browser: An image featuring a headless browser engine and control APIs. It is suitable for browser-related tasks, such as automated web testing and data scraping.",
   "note": "not offered: outside the product's scope — the Browser sandbox is documented as a headless-browser-plus-control-API image; no stealth/anti-fingerprinting feature is documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_images?lang=en",
   "quote": "Browser: An image featuring a headless browser engine and control APIs. It is suitable for browser-related tasks, such as automated web testing and data scraping.",
   "note": "not offered: outside the product's scope — no CAPTCHA-solving capability is documented for the browser/AIO sandbox tools.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "共享公网访问：仅当网络访问选择私网访问时，支持开启共享公网端口。开启：沙箱模板将使用平台提供的公网出口访问公网。",
   "note": "Egress is via the platform's shared public gateway, or via the customer's own VPC NAT gateway/EIP in private-network mode — both are ordinary cloud datacenter IP ranges, not residential/mobile.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "Webshell: Log in to the instance Webshell and execute commands to perform operations such as viewing the environment information of the instance, and performing function debugging.",
   "note": "Shell access is documented via a console Webshell and the E2B-compatible commands/PTY API; no SSH server/port is documented.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "sandbox.connect() / Sandbox.list() / sandbox.getInfo() / sandbox.kill() / sandbox.setTimeout() / sandbox.isRunning() / sandbox.pause()",
   "note": "The documented E2B-compatible Sandbox API has no fork/clone method; template-restore from a snapshot creates one new instance, not a clone of a live machine.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "sandbox.connect() / Sandbox.list() / sandbox.getInfo() / sandbox.kill() / sandbox.setTimeout() / sandbox.isRunning() / sandbox.pause()",
   "note": "Depends on fork, which is not offered; no clone-of-a-running-instance capability is documented.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Using_snapshots_to_restore_instances?lang=zh",
   "quote": "每个手动快照仅可恢复 1 次...从快照恢复出一个新实例",
   "note": "Snapshot restore spins up a single new instance (not a fan-out fork) and memory/process-state inclusion is not documented; pause/resume documentation only claims restoring 'its state', not that running processes are kept live across a clone.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "sandbox.connect()​ Connects to an existing sandbox instance. If it is paused, it will automatically resume.",
   "note": "Connecting to a paused sandbox automatically resumes it.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/Advanced_configurations_for_sandbox_applications?lang=en",
   "quote": "You can suspend (PauseSandbox) a running sandbox instance to save its state, release underlying resources, and stop billing. You can later resume (ResumeSandbox) the instance from the snapshot to restore its state and continue running.",
   "note": "Pause/resume preserves and restores instance state across a stop/start cycle; TOS-bucket mounts also persist data across instance lifecycles.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "Instance lifetime: Sandbox instance lifetime. Instances will be terminated upon reaching the end of their lifetime.",
   "note": "Termination is governed by a fixed, configurable lifetime timer set at creation, not by idle-traffic detection; no idle-based auto-stop is documented.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "Instance specification: Set the number of vCPU and memory capacity for the instance. By default, the instance specification set with the sandbox application will be applied.",
   "note": "vCPU/RAM specification is configured when creating the sandbox application/instance; no API to resize a running instance's resources in place is documented.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/RunningCodexinasandboxviaAgentKitCLI?lang=zh",
   "quote": "Agent Runtime is driven by prompt + session_id (`agentkit invoke \"...\"`, session_id/user_id headers) for hosted VeADK/LangGraph/ADK agents; ArkClaw/Hermes sandboxes have built-in agents reachable via WebChat or a Feishu bot channel.",
   "note": "AgentKit ships its own task agents (ArkClaw personal/office agent, Hermes continual-learning agent) invoked through a first-party prompt/session API, distinct from driving a coding harness like Codex.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "MCP 服务：是否将沙箱以 MCP 服务形式对外开放。开启后，沙箱工具将支持第三方 Agent 通过 MCP 协议快速接入与调用。",
   "note": "A sandbox template/tool can be exposed as an MCP service for third-party agents to call.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/agentkit/Code_sandbox_tool_example?lang=zh",
   "quote": "前提条件：已安装Python，且版本不低于3.10。... pip install veadk-python",
   "note": "Python (>=3.10) with the first-party veadk-python SDK is the documented integration/runtime path for the Code sandbox tool.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/E2Bcompatibilityinstructions?lang=en",
   "quote": "This allows business applications to directly use the official E2B SDK without image modification.",
   "note": "The official E2B SDK (which the veFaaS sandbox is API-compatible with) ships both Python and JavaScript/Node.js clients, and veFaaS separately documents a Node.js function runtime with online dependency installation.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "Domain names for accessing sandbox instances can be found on the Sandbox instances tab if the corresponding sandbox application already has Gateway routing enabled. You can access a specific sandbox instance by using either a unified domain name or a wildcard domain name.",
   "note": "Access is via APIG gateway domain names (unified or per-instance wildcard subdomain), not a per-machine public IPv4 address.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "Domain names for accessing sandbox instances can be found on the Sandbox instances tab if the corresponding sandbox application already has Gateway routing enabled.",
   "note": "Instances are reached through API-gateway-issued HTTPS domain names.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/CreateTool_-_Creates_tool?lang=zh",
   "quote": "NetworkConfiguration.VpcConfiguration.SecurityGroupIds.N string[] 可选 示例值：SecurityGroupIds.1=sg-w08tvkc3e****",
   "note": "derived: outbound control is expressed through VPC security groups / NAT (IP and port level), not HTTP method/path rules; matches the card's existing egress_allowlist_level of \"ip\".",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Creating_tools?lang=zh",
   "quote": "共享公网访问：开启：沙箱模板将使用平台提供的公网出口访问公网。未开启：将默认使用您选择 VPC 的自定义公网（例如，使用公网IP或NAT网关等公网产品）出口。",
   "note": "Default/shared-mode egress uses the platform's shared public exit (not a fixed per-customer IP); a fixed egress IP is only possible if the customer brings and configures their own EIP/NAT in private-VPC mode, which is not a provider-managed static-egress-IP feature.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
   "quote": "AgentKit 的费用由资源用量费用与网关实例费用累加得到",
   "note": "not offered: outside the product's scope — the AgentKit Sandbox/Agent Runtime billing items are CPU vCPU-hour and RAM GiB-hour only, with no GPU line item; veFaaS has a separate 'Serverless GPU' function service, but it is not documented as part of the AgentKit sandbox/runtime product.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_images?lang=en",
   "quote": "Computer: A standard Linux desktop/terminal image. It provides a complete Linux operating system environment and supports standard Shell commands and desktop interactions.",
   "note": "not offered: outside the product's scope — all public sandbox images (All-in-One, Code, Browser, Computer, Experimental, R2E-Gym-Subset, WebArena, SWE-bench) are Linux-based.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_images?lang=en",
   "quote": "Computer: A standard Linux desktop/terminal image. It provides a complete Linux operating system environment and supports standard Shell commands and desktop interactions.",
   "note": "not offered: outside the product's scope — all public sandbox images are Linux-based; no macOS runtime is offered.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Overview_of_cloud_sandbox?lang=en",
   "quote": "Cloud sandbox: a serverless service built for AI task execution... You can create cloud sandbox environments within seconds based on your business requirements without the need to be concerned about the underlying infrastructure.",
   "note": "not offered: outside the product's scope — this is a fully managed Volcano Engine/BytePlus cloud service; no self-hosted deployment of the sandbox platform is documented.",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/vefaas/Overview_of_cloud_sandbox?lang=en",
   "quote": "Cloud sandbox: a serverless service built for AI task execution... without the need to be concerned about the underlying infrastructure.",
   "note": "not offered: outside the product's scope — no bring-your-own-cloud-account deployment model is documented; sandboxes run only in Volcano Engine's/BytePlus's own regions.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Code_sandbox_tool_example?lang=zh",
   "quote": "pip install veadk-python",
   "note": "The core AgentKit/veFaaS sandbox platform is a proprietary managed service; veadk-python is a client-side agent-development SDK for calling the service, not evidence that the sandbox/runtime core is open source under an OSI license.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
   "quote": "沙箱模板 CPU 0.0000405 CNY/vCPU/s... 华北2 北京",
   "note": "Documented AgentKit regions are mainland China (cn-beijing) and BytePlus Asia Pacific (Johor); no EU region is offered for the sandbox/runtime product.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
   "quote": "Usage is settled hourly from the balance. Resources are shut down 24 h after the account goes into arrears.",
   "note": "granularity: account-only; Billing rates (CNY/vCPU/s, CNY/GB/s) and hourly settlement model are documented; no REST API endpoint, SDK method, or CLI command is documented for querying billable usage (CPU-seconds, GB-seconds, costs) of individual sandboxes or tagged groups. The agentkit CLI (create/exec/web) and E2B SDK do not expose usage queries.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "isolation": {
   "value": "container",
   "source": "https://docs.volcengine.com/docs/vefaas/Sandbox_instances?lang=en",
   "quote": "A sandbox instance is a secure and isolated container runtime environment that is implemented in the cloud sandbox based on the sandbox image.",
   "note": "The veFaaS overview says the same: \"Sandbox instances : they are secure and isolated container runtime environments realized by loading and running sandbox images\" (https://docs.volcengine.com/docs/vefaas/Overview_of_cloud_sandbox?lang=en). No page names a microVM, Kata or other secure-container layer, so the card no longer claims VM isolation.",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "CN",
   "state": null,
   "city": "Beijing",
   "provider_region": "cn-beijing",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Shanghai",
   "provider_region": "cn-shanghai",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "MY",
   "state": null,
   "city": "Johor",
   "provider_region": "ap-southeast-1",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://docs.volcengine.com/docs/agentkit/Billing_items?lang=zh",
 "locations_quote": "沙箱模板 CPU 0.0000405 CNY/vCPU/s, 内存 0.0000102 CNY/GB/s, 公网流量 0.8 CNY/GB; 运行时 CPU 0.000097375 CNY/vCPU/s, 内存 0.000015456 CNY/GB/s. BytePlus (Johor ap-southeast-1): 0.00000975 USD/vCPU/s, 0.00000225 USD/GB/s, egress 0.081 USD/GB.",
 "locations_checked": "2026-10-01"
}