Botperch

CapabilitiesReaching it

Tunnel to your computer

Reach a port inside the sandbox as if it were on your own machine (port forwarding).

Short answer: 9 of 16 providers offer it fully: Agent 37, Boat, InstaBox, Morph, Runtime, Sandboxer, Sprites, Tensorlake and boxd. Checked 29 October 2026.

9 yes0 with a catch2 no5 not publishedChecked 29 October 2026

Who offers it

Part of Reaching it: links, ports and who can open them, which explains why it matters.

Fully: Agent 37, Boat, boxd, InstaBox, Morph, Runtime, Sandboxer, Sprites and Tensorlake. Not at all: Cloudflare Sandbox and Vercel Sandbox.

  • Agent 37Yesssh -L

    Local port forwarding works through the same SSH connection the provider documents.

    inferred “there is no port to dial directly” Source

  • BoatYesssh -L

    A standard SSH connection can carry a local port forward.

    inferred “Run `boat ssh <id>` for a shell.” Source

  • boxdYesssh -L

    Local port forwarding works because the machine runs a real SSH server.

    docs-confirmed “It is real SSH” Source

  • InstaBoxYesssh -L, yours only

    A local forward is private to you and does not open a public port.

    docs-confirmed “It is `ssh -N -L` with the instabox certificate, so it reaches any TCP service, and only you can use it” Source

  • MorphYesssh -L

    Local forwarding works over the SSH connection the provider documents.

    inferred “through SSH, or puppeteered through the Devbox API” Source

  • RuntimeYesThrough the API

    A local forward runs over one authenticated connection without opening a port on the internet.

    docs-confirmed “All of it goes through Runtime's API, authenticated with your key, over one WebSocket per connection.” Source

  • SandboxerYessbx forward

    One command maps a machine port onto your own computer.

    docs-confirmed “`sbx forward sb_k3v9x2mq --remote 5432`” Source

  • SpritesYessprite proxy

    A local proxy maps a machine port onto your own computer.

    docs-confirmed “it maps a remote port onto your machine” Source

  • TensorlakeYesLocal tunnel

    A local address maps straight to a port in the machine, with no public address.

    docs-confirmed “Tunnels give your machine a `localhost:<port>` that maps directly to a port inside a running sandbox.” Source

  • Cloudflare SandboxNo

    Note: There is no way to map a port inside the machine onto your own computer.

    inferred “Because all Container requests are passed through a Worker, end-users cannot make non-HTTP TCP or UDP requests to a Container instance.” Source

  • Vercel SandboxNo

    Note: Exposed ports are reachable on the internet, but there is no documented way to map one onto your own computer.

    inferred “Exposed ports are accessible via a public URL” Source

  • BlaxelNot published

    The documented shell is an interactive terminal; no local port forwarding is published.

    inferred “bl connect sandbox your-sandbox-name” Source

  • DaytonaNot published

    No local port forwarding is documented.

    inferred “SSH access tokens expire automatically after 60 minutes.” Source

  • E2BNot published

    No local port forwarding is documented.

    inferred “Connect to your sandbox via SSH using a WebSocket proxy” Source

  • LizardNot published

    No local port forwarding is documented for sandboxes.

    inferred “a request without the sandbox's access token gets HTTP 401” Source

Related

Other capabilities in this feature

Where it decides the choice

The feature

Words used here

  • SSHA standard way to open a terminal on a remote machine from your own computer.

Need several capabilities at once? Add more in the capability finder. Something wrong here? Use the report link at the bottom of the page.