# Arrakis

> Open-source, self-hosted sandbox platform that runs AI agent code in isolated MicroVMs with snapshot-and-restore backtracking, a REST API and a Python SDK.

- **Category:** AI Agents
- **Licence:** AGPL-3.0
- **Latest version:** release-36
- **Open source:** oss
- **Languages:** Go
- **Platforms:** Linux
- **Tags:** Mcp, REST API, Snapshot, Ai Agents, Sandbox, Vnc, Code Execution, Virtualization, Microvm, Computer Use, Python SDK, Cloud Hypervisor, Backtracking

## Description

Arrakis is a self-hosted sandboxing platform for running AI-generated or otherwise untrusted code. Each sandbox is a MicroVM booted by cloud-hypervisor that runs Ubuntu with a code-execution service and a VNC desktop, so agent code stays isolated from the host and from other agents, while overlayfs guards the guest root filesystem. Clients — humans and AI agents alike — drive it through a REST API served by arrakis-restserver, a Go CLI, the py-arrakis Python SDK, or an MCP server, and Arrakis manages port-forwarding so sandbox GUIs, including the pre-installed Chrome used for computer-use workflows, are reachable without extra setup. Its signature capability is snapshot-and-restore: checkpoint a sandbox mid-task and later rewind to that exact state, which is useful for MCTS-style agents and for explaining elaborate agent runs. Guest images are customized by editing a Dockerfile, and a prebuilt Linux kernel ships out of the box, though you can pass your own. Installation is a curl-piped setup.sh that fetches prebuilt binaries on a Linux host with /dev/kvm; the REST server must be started with sudo (for iptables networking) and defaults to port 7000. It is licensed AGPL-3.0 with a commercial-licensing option, is Linux-only, and restoring a snapshot reuses the original VM's IP, so the old VM must first be stopped or destroyed.

## Links

- [Homepage](https://github.com/abshkbh/arrakis)

---
Source: https://selfhost.directory/project/arrakis