# E2B

> Firecracker microVMs and templates for agent code, sold per running second.

Website: https://e2b.dev  
Guide page: https://botperch.com/providers/e2b/  
Checked: 2026-10-28

**Short answer:** One always-on personal agent (2 vCPU / 4 GiB / 20 GiB) costs about $270.89 a month here, with a catch: Sessions end after 24 hours, so an always-on machine has to be restarted by your own code. The AI model adds about $14.70 a month on top (GLM 5.3, 30 requests a day at 40k tokens each, median zero-retention price; from $6.84 at the cheapest host). Fits well: A microVM with its own kernel, Docker, snapshots that keep memory, and up to 20 forks from a running sandbox.

E2B sells isolated sandboxes for agents: a Linux VM created on demand from a template, driven through Python and JavaScript SDKs. It is infrastructure for a product rather than a finished assistant.
Templates define what a sandbox starts with, including images built from Docker images, and the code-interpreter and desktop products run inside the sandbox.

**Who it is for:** Developers integrating code execution, data analysis or computer use into an agent product.

**Isolation:** Firecracker microVM with its own kernel, not a container. The default template user is user, not root; root can be set in a template. Docker is documented, but kernel features are not unlimited: the sandbox kernel does not ship xt_owner.

**Sizes and regions:** Sized by vCPU and RAM: up to 8 vCPU, 8 GiB memory on Hobby and Pro, and 10 or 20 GiB of included disk. No GPU on any plan. Regions: US (GCP), US West (AWS), EU and APAC.

## How it charges

- model: Per-second usage against a credit balance; Pro adds a monthly plan fee.
- meter: $0.000014 per vCPU-second and $0.0000045 per GiB-second of allocated resources while running. Paused and killed sandboxes are not billed.
- stopped: Nothing for compute. Volumes and snapshots are separate objects with their own storage.
- planFee: Hobby has no fee; Pro is $150 a month plus usage; Enterprise has a $3,000 monthly minimum.
- minimum: No published per-sandbox minimum. Hobby starts with a one-time $100 credit and no card.

Per second on allocated vCPU and memory while running; paused sandboxes cost nothing.
- Pausing keeps memory and files at no charge; volumes and snapshots are separate.
- Sandbox storage is included at no extra cost, up to 10 GiB on Hobby and 20 GiB on Pro.

## Monthly cost for each preset workload

- A personal agent that stays on (Hermes, OpenClaw): $270.89 (catch: Sessions end after 24 hours, so an always-on machine has to be restarted by your own code.)
- A coding agent for one developer: $202.99 (catch: 40 GiB of disk is over the 20 GiB limit.)
- A code interpreter inside your product: $55.20
- A browser agent for a small team: $828.00
- Self-hosted n8n for a small team: $270.89 (catch: Sessions end after 24 hours, so an always-on machine has to be restarted by your own code.)
- A Discord or Slack bot for one server: $60.44 (catch: Sessions end after 1 hour, so an always-on machine has to be restarted by your own code.)
- Claude Code for a team of five: $414.96 (catch: 40 GiB of disk is over the 20 GiB limit.)
- A scraper that runs four times a day: $1.66
- Your own remote MCP server: $48.62 (catch: Sessions end after 1 hour, so an always-on machine has to be restarted by your own code.)
- A: 1,000 short tasks: $27.60
- B: one always-on box: $241.78 (catch: 50 GiB of disk is over the 10 GiB limit. Sessions end after 1 hour, so an always-on machine has to be restarted by your own code.)
- C: three hours a day: $164.90

## Fits well

- A microVM with its own kernel, Docker, snapshots that keep memory, and up to 20 forks from a running sandbox.
- An agent that needs a real API and SDKs, plus templates built from any Docker image.
- A team that needs a SOC 2 report and a HIPAA path without an enterprise contract.

## Fits badly

- A long-running agent: the default timeout kills the sandbox after five minutes and commands do not reset it.
- Memory above 8 GiB, or any GPU workload.
- A client-facing link that must be private: public URLs have no authentication by default.

## Features

- **Isolation** (yes): Firecracker; non-root user. A Firecracker microVM with its own kernel. Docker is documented, but the default template user is user, not root, and some kernel modules are missing. [source](https://docs.e2b.dev/security) [docs](https://docs.e2b.dev/faq/security-and-compliance#how-sandboxes-are-isolated)
- **Sizes and regions** (partly): 8 vCPU / 8 GiB; no GPU. Up to 8 vCPU and 8 GiB, with 10 GiB of disk on Hobby and 20 GiB on Pro. Four regions, no GPU on any plan. [source](https://docs.e2b.dev/billing.md) [docs](https://docs.e2b.dev/billing)
- **Lifecycle** (partly): RAM + disk. Pause saves the filesystem and RAM, so processes resume; a filesystem-only pause is opt-in. Kill is terminal, and the default timeout kills the sandbox after five minutes. [source](https://docs.e2b.dev/sandbox/persistence) [docs](https://docs.e2b.dev/sandbox)
- **Snapshots and forks** (yes): RAM + disk; 20 forks. Snapshots capture filesystem and memory while the source keeps running, and filesystem-only snapshots are available. Up to 20 forks from a running VM, with a brief pause and dropped connections. [source](https://docs.e2b.dev/sandbox/fork.md) [docs](https://docs.e2b.dev/sandbox/snapshots)
- **Storage** (partly): 10–20 GiB; volumes in beta. Snapshots keep the filesystem, and separate volumes persist across sandboxes, but volumes are in private beta and cannot be snapshotted. Included disk is 10 GiB on Hobby and 20 GiB on Pro. [source](https://docs.e2b.dev/faq/calculate-sandbox-price.md) [docs](https://docs.e2b.dev/volumes)
- **Idle and waking** (partly): 5 min, then killed. A timeout defaults to five minutes and kills the sandbox; pausing instead is opt-in. Commands and URL requests do not reset it. Continuous runtime is capped at one hour on Hobby and 24 hours on Pro. [source](https://docs.e2b.dev/faq/sandbox-lifetime) [docs](https://docs.e2b.dev/faq/sandbox-lifetime)
- **Reaching it** (partly): No auth. Public URLs are reachable by anyone who knows them, with no authentication by default. SSH runs through a WebSocket proxy rather than a native port. [source](https://docs.e2b.dev/network/public-url) [docs](https://docs.e2b.dev/network/public-url)
- **Custom domains** (partly): Own proxy in front. No native custom domain. The documented path is a customer-operated GCP VM running Caddy and Cloudflare DNS in front of the sandbox. [source](https://docs.e2b.dev/network/custom-domain) [docs](https://docs.e2b.dev/network/custom-domain)
- **Outbound network** (yes): No rate; no static IP. Outbound is open by default with documented domain and IP allow and deny rules. No dedicated or static egress IP on any plan, including Enterprise. [source](https://docs.e2b.dev/faq/egress-ip-ranges) [docs](https://docs.e2b.dev/network/internet-access)
- **Keys and secrets** (yes): No, proxy. An egress proxy injects the real value into matching outbound HTTPS requests outside the sandbox. The destination receives the value and could expose it in its response. [source](https://docs.e2b.dev/secrets) [docs](https://docs.e2b.dev/secrets)
- **Ways to drive it** (yes): No; SDK. Python and JavaScript SDKs, a CLI, SSH through a WebSocket proxy, a desktop SDK, an MCP gateway inside the sandbox and lifecycle webhooks. [source](https://docs.e2b.dev/sandbox/ssh-access) [docs](https://docs.e2b.dev/cli)
- **Built-in agents** (partly): None preinstalled; guides. Guides show Claude Code, Codex and Amp running in a sandbox, but preinstallation is not claimed and there is no hosted agent-run API. [source](https://docs.e2b.dev/use-cases/coding-agents) [docs](https://docs.e2b.dev/agents/hermes)
- **Teams and accounts** (partly): Per-project limit. A workspace shares payment, credits and invoice; each project has its own plan and spending limit. SOC 2 Type II and a HIPAA BAA path. SSO and audit coverage are not published. [source](https://docs.e2b.dev/workspaces) [docs](https://docs.e2b.dev/workspaces)
- **Billing models** (partly): $0.000014/vCPU-s. Per second of allocated vCPU and RAM while running, against a credit balance. Paused and killed sandboxes are not billed. Pro adds a $150 monthly fee; Hobby has a one-time $100 credit. [source](https://e2b.dev/pricing.md) [docs](https://docs.e2b.dev/billing)
- **Trials and free tiers** (yes): $100 one-off. A one-time $100 usage credit on Hobby, with no card to start. When it runs out without a payment method, every project in the workspace is blocked shortly afterwards. [source](https://e2b.dev/pricing.md) [docs](https://e2b.dev/pricing)
- **The company** (partly): FoundryLabs, Inc.; SOC 2 II. FoundryLabs, Inc., Delaware. Founded 2023 by Vasek Mlejnsky (CEO) and Tomas Valenta (CTO); $21M Series A in July 2025, $32M total. Status page shows 99.78% for US-West-1 over Jul–Oct 2026, a regional aggregate rather than an SLA. Enterprise terms set uptime and support in the agreement; no public numeric SLA for Hobby or Pro. SOC 2 Type II report on request and a HIPAA BAA path. Fees can change with 30 days' notice, but general terms changes take effect immediately; deletion after cancellation has no published deadline. [source](https://docs.e2b.dev/security.md)

## Capabilities

- Its own virtual machine: yes (Firecracker microVM) [source](https://docs.e2b.dev/security)
- Root access: yes (root via template). The default template runs as an ordinary user called user, not root; root has to be set in the template. [source](https://docs.e2b.dev/template/user-and-workdir)
- Docker inside: yes (Docker image documented) [source](https://docs.e2b.dev/template/examples/docker)
- Nested virtualisation: not-published [source](https://docs.e2b.dev/faq)
- Your own image: yes (any Docker image) [source](https://docs.e2b.dev/template/base-image)
- Any size you like: partly (up to 8 cores / 8 GiB). You can choose cores and memory, but only up to 8 of each; more needs a conversation with support. [source](https://docs.e2b.dev/billing)
- Large machines: no (8 cores / 8 GiB). The ceiling is 8 cores and 8 GB of memory, so a 32 GB machine cannot be bought. [source](https://docs.e2b.dev/billing)
- Resize while running: no (fixed at creation). The machine keeps the size it was created with; there is no resize. [source](https://docs.e2b.dev/billing)
- GPUs: no (CPU only). There is no graphics processor option in any plan, tool or template. [source](https://docs.e2b.dev/faq)
- Choose the region: partly (4 regions, support needed). Four regions exist, but outside the United States you have to contact support to be switched on. [source](https://docs.e2b.dev/faq/eu-region)
- Runs in the EU: yes (europe-west1) [source](https://docs.e2b.dev/faq/eu-region)
- Pause keeps memory: yes [source](https://docs.e2b.dev/sandbox/persistence)
- Pre-started pools: no [source](https://docs.e2b.dev/sandbox)
- Starts in under a second: not-published [source](https://docs.e2b.dev/sandbox)
- Snapshots of files: yes [source](https://docs.e2b.dev/sandbox/persistence)
- Snapshots with memory: yes [source](https://docs.e2b.dev/sandbox/fork)
- Copy a running machine: yes (Up to 20 at once). The source pauses while it is copied and its open connections drop. [source](https://docs.e2b.dev/sandbox/fork)
- Pick an older snapshot: yes [source](https://docs.e2b.dev/sandbox/snapshots)
- Reusable templates: yes [source](https://docs.e2b.dev/template/how-it-works.md)
- Automatic backups: no [source](https://docs.e2b.dev/sandbox/snapshots)
- Files survive a stop: no [source](https://docs.e2b.dev/sandbox/persistence)
- Separate volumes: partly. Volumes exist but are in private beta and need access from support. [source](https://docs.e2b.dev/volumes)
- One volume, several machines: partly. One volume can serve several sandboxes, but volumes are in private beta. [source](https://docs.e2b.dev/volumes)
- Mount outside storage: partly. Mounting a bucket needs a custom template with the right filesystem tool installed; it is not built in. [source](https://docs.e2b.dev/storage/cloud-buckets)
- Large disk: no (20 GiB max). The largest included disk is 20 GiB, short of 100 GB. [source](https://docs.e2b.dev/billing)
- Can stay on indefinitely: partly (1 h Hobby, 24 h Pro). A sandbox cannot run longer than an hour on the free plan or 24 hours on Pro, whether or not it is busy. [source](https://docs.e2b.dev/billing)
- Choose the idle timeout: partly (5 min, max 24 h). The clock counts down from creation and commands do not reset it, and the default action is to kill rather than pause. [source](https://docs.e2b.dev/faq/sandbox-lifetime)
- Wakes on a request: yes [source](https://docs.e2b.dev/faq/sandbox-lifetime)
- Scheduled runs: no [source](https://docs.e2b.dev/llms.txt)
- Public link to a port: yes (Anyone with the link) [source](https://docs.e2b.dev/network/public-url.md)
- Private link: no. There is no built-in lock: anyone who has the link can open it. [source](https://docs.e2b.dev/network/public-url.md)
- Real SSH: partly (You build the image). SSH only works if you build a custom image with an SSH server and a relay inside it. [source](https://docs.e2b.dev/sandbox/ssh-access.md)
- Terminal in the browser: not-published [source](https://docs.e2b.dev/sandbox/ssh-access.md)
- Tunnel to your computer: not-published [source](https://docs.e2b.dev/sandbox/ssh-access.md)
- Non-web ports: not-published [source](https://docs.e2b.dev/network/public-url.md)
- Your own domain: partly (Own proxy). You have to run a server of your own in front of the machine to use your domain. [source](https://docs.e2b.dev/network/custom-domain.md)
- Automatic HTTPS: no. The certificate is obtained by the server you run in front of the machine, not by the provider. [source](https://docs.e2b.dev/network/custom-domain.md)
- Outbound data included: not-published [source](https://docs.e2b.dev/pricing.md)
- Allow only some sites: yes (Domain or address list) [source](https://docs.e2b.dev/network/internet-access.md)
- Turn the internet off: yes (On/off switch) [source](https://docs.e2b.dev/network/internet-access.md)
- Fixed outgoing IP: no. There is no dedicated or fixed outbound address on any plan, including Enterprise. [source](https://docs.e2b.dev/faq/egress-ip-ranges.md)
- Stored secrets: yes (Per project) [source](https://docs.e2b.dev/secrets.md)
- Secrets the agent cannot read: yes (Outside the machine) [source](https://docs.e2b.dev/secrets.md)
- Limited API keys: partly (One key per team). A key belongs to one team and there is no published read-only or per-machine scope. [source](https://docs.e2b.dev/api-key.md)
- Create from the website: no [source](https://docs.e2b.dev/quickstart.md)
- Command-line tool: yes [source](https://docs.e2b.dev/cli.md)
- Python SDK: yes [source](https://docs.e2b.dev/quickstart.md)
- TypeScript SDK: yes [source](https://docs.e2b.dev/llms.txt)
- Documented HTTP API: yes [source](https://docs.e2b.dev/api-reference/sandboxes/create-sandbox-v2.md)
- MCP server: partly. E2B's MCP support runs other companies' tools inside a sandbox; nothing of E2B's lets your assistant create sandboxes. [source](https://docs.e2b.dev/mcp-gateway.md)
- Interactive terminal over the API: yes [source](https://docs.e2b.dev/sandbox/pty.md)
- Files over the API: yes [source](https://docs.e2b.dev/filesystem.md)
- Coding agents preinstalled: partly. A prebuilt Hermes template exists, but the default image has no agent and there is no Claude Code or Codex template. [source](https://docs.e2b.dev/agents/hermes.md)
- Send it a prompt: no. Guides show agents running in a sandbox, but no API takes a prompt and runs one for you. [source](https://docs.e2b.dev/use-cases/coding-agents.md)
- One-click Hermes: partly. A prebuilt template is ready, but you still create the sandbox with a command and pay by usage. [source](https://docs.e2b.dev/agents/hermes.md)
- One-click OpenClaw: no. No OpenClaw template or guide is published. [source](https://docs.e2b.dev/use-cases/coding-agents.md)
- Browser built in: partly. A browser comes with the desktop image or through Kernel cloud browsers, not in the default sandbox image. [source](https://docs.e2b.dev/use-cases/remote-browser.md)
- Desktop for computer use: yes [source](https://docs.e2b.dev/use-cases/computer-use.md)
- Runs other platforms' agents: yes [source](https://docs.e2b.dev/agents/claude-managed-agents.md)
- Team workspace: yes [source](https://docs.e2b.dev/workspaces.md)
- Roles and permissions: not-published [source](https://docs.e2b.dev/workspaces.md)
- Single sign-on: not-published [source](https://docs.e2b.dev/workspaces.md)
- Hard spending cap: yes [source](https://docs.e2b.dev/workspaces.md)
- Usage alerts: not-published [source](https://docs.e2b.dev/workspaces.md)
- Audit log: not-published [source](https://docs.e2b.dev/security.md)
- Billed per second: yes (per second) [source](https://e2b.dev/pricing.md)
- CPU billed only while working: no (allocated size). The bill follows the cores and memory you gave the machine, not what it used. [source](https://docs.e2b.dev/faq/calculate-sandbox-price)
- Paused costs only storage: yes (nothing while paused) [source](https://docs.e2b.dev/faq/calculate-sandbox-price)
- No monthly fee: yes (none on Hobby) [source](https://e2b.dev/pricing.md)
- Flat monthly price: no (per second parts). The bill is cores plus memory per second. [source](https://e2b.dev/pricing.md)
- Ongoing free tier: no (one-off $100). The $100 is a one-time credit, not a monthly allowance. [source](https://e2b.dev/pricing.md)
- Free starting credit: yes ($100) [source](https://e2b.dev/pricing.md)
- Try without a card: yes (no card) [source](https://e2b.dev/pricing.md)
- Public status page: yes [source](https://e2b.dev/pricing)
- Uptime promise (SLA): partly. Uptime and support terms are set in the Enterprise agreement; Hobby and Pro have no public numeric SLA. [source](https://e2b.dev/enterprise.md)
- SOC 2 report: yes (Type II) [source](https://docs.e2b.dev/security.md)
- Data processing agreement: yes [source](https://docs.e2b.dev/security.md)
- Open source or self-hostable: yes (Embed, one machine) [source](https://docs.e2b.dev/byoc.md)

## Usability

- Dashboard: A console exists for support and API keys, but the documented path is SDKs, a CLI and API keys.
- Without code: No documented no-code path. Examples are SDK calls, terminals and templates; the desktop SDK still needs code to drive it.
- Signup: No credit card to start, and a one-time $100 credit. When a workspace without a payment method runs out, every project in it is blocked shortly afterwards.
- Docs: Extensive docs with per-page Markdown. Support is through the console. SOC 2 Type II is reported, and a HIPAA BAA can be requested.
- Trips people up: The default timeout is 5 minutes and the default action is to kill the sandbox.
- Trips people up: Public URLs are reachable by anyone who knows them.
- Trips people up: The pricing page and billing docs disagree on the default sandbox size.
- Trips people up: Volumes are in private beta and cannot be snapshotted.

## Company

- Legal entity: FoundryLabs, Inc., a Delaware corporation. [source](https://docs.e2b.dev/security.md)
- Founded: 2023, by Vasek Mlejnsky (CEO) and Tomas Valenta (CTO). [source](https://e2b.dev/about.md)
- Funding: $21M Series A in July 2025, led by Insight Partners; $32M total at that announcement. [source](https://e2b.dev/resources/series-a.md)
- Headcount: About 25, a third-party estimate from June 2026. No company-confirmed figure is published. [source](https://rywalker.com/research/e2b)
- Status and SLA: 99.78% for US-West-1 over July–October 2026. Uptime and support terms are set in the enterprise agreement. [source](https://status.e2b.dev/)
- Certification: SOC 2 Type II report and a HIPAA BAA path, both by request through the Trust Center. [source](https://docs.e2b.dev/security.md)

## Caveats

- **The default timeout destroys the sandbox** (open): Every sandbox has a timeout defaulting to five minutes, and onTimeout: 'kill' is the default. Pausing instead is opt-in.
- **The default sandbox size is stated two ways** (contradiction): The pricing page says the default is 2 vCPU / 4 GiB; the billing docs say 2 vCPU / 512 MiB. Both are current provider statements.
- **Volumes are in private beta** (open): Volumes persist across sandboxes but file locking can hang, metadata caching is disabled and snapshots are not supported.
- **No static egress IP on any plan** (open): There are no dedicated or static egress addresses, including Enterprise; a customer-operated proxy is the documented workaround.
- **Public URLs have no authentication by default** (open): A sandbox's public URLs are reachable by anyone who knows them.

## Sources

- [Docs](https://docs.e2b.dev/)
- [Persistence](https://docs.e2b.dev/sandbox/persistence)
- [Snapshots](https://docs.e2b.dev/sandbox/snapshots)
- [Fork](https://docs.e2b.dev/sandbox/fork)
- [Pricing](https://e2b.dev/pricing)
- [Security](https://docs.e2b.dev/security)