- Home
- Sandbox Software
- Context Agent Sandboxes
Context Agent Sandboxes
San Francisco, California, United States
What it is
Context Agent Sandboxes gives each agent task a separate sandbox on the customer's cluster, using the permissions of the person who requested the task. Every run starts in a fresh environment that is destroyed after its idle period, 30 minutes by default. Administrators can choose open, domain-allowlist, or workspace-only network access. In the supervised preset, commands need human approval, and connections beyond the allowlist prompt for a decision. Files pass through a permission-checking gateway rather than being mounted from Drive; outputs are pushed explicitly. Credentials are injected only after authorization, and an append-only audit log records commands, files, connections, and permission decisions. Context lists more than 180 integrations and remote MCP servers. Enterprise deployments run on the customer's Kubernetes cluster, with KOTS installation options for EKS or AKS and an air-gapped bundle. Plans include Free at no cost, Plus at $20 a month, billed per person per month, and Pro at $200 a month, billed per month. Enterprise pricing is custom. Sandbox time is not metered on Context plans; Enterprise customers pay their cloud provider for compute.
For and against
For
- Fresh sandbox for each task run
- Network access has three administrator settings
- Supervised preset requires approval for commands
- Append-only audit log records activity and decisions
- Free plan includes sandboxes
Against
- Sandboxes are destroyed after the idle window
- Persistent storage is not available
- Enterprise customers pay their cloud provider for compute
The verdict
Context Agent Sandboxes emphasizes per-task isolation and controls over network access, credentials, files, and approvals. Compare plan limits and deployment needs, including the custom-priced Enterprise option.
Who it suits
It suits teams that need isolated agent tasks with configurable network controls, approvals, and audit records. Enterprise customers can run sandboxes on their own Kubernetes cluster.
Plans and prices
Free
Includes sandboxes · one agent concurrently · model credits apply
Read 15 Oct 2026 · context.ai
Plus
Three agents concurrently · sandbox time not metered · model credits apply
Read 15 Oct 2026 · context.ai
Pro
Ten agents concurrently · 25,000 credits · sandbox time not metered
Read 15 Oct 2026 · context.ai
Enterprise
Own cloud deployment · cluster-sized capacity · enterprise support by agreement
Read 15 Oct 2026 · context.ai
On the record
- Air-gapped operation
- Air-gapped bundles include the required images and can use open-weight models inside the disconnected boundary, reducing the available model catalog.context.ai · read 15 Oct 2026
- API
- The REST task API can create, poll, cancel and share tasks, upload files, download outputs and read evaluations.context.ai · read 15 Oct 2026
- API reliability features
- Task creation supports idempotency keys, structured output schemas and signed webhooks with up to three delivery attempts.context.ai · read 15 Oct 2026
- Apple app requirements
- The Context iPhone and iPad app requires iOS or iPadOS 16.4 or later; Mac compatibility requires macOS 12 and Apple silicon.apps.apple.com · read 15 Oct 2026
- Approval controls
- Under the supervised preset, commands require human approval, and connections outside the allowlist prompt for a decision before leaving.context.ai · read 8 Oct 2026
- Audit
- Commands, files, connections, and permission decisions are recorded in an append-only audit log with the actor and decision maker.context.ai · read 8 Oct 2026
- Audit trail
- The append-only audit record includes task, model and tool calls, sources, actions, approvals and results, and can be exported as CSV.context.ai · read 15 Oct 2026
- Command-line client
- Context Code installs on macOS, Linux and Windows and pairs a terminal session with a workspace task list.context.ai · read 15 Oct 2026
- Company record discrepancy
- Crunchbase lists an older Context.ai product-analytics entity as Get Context Co., London-based, 1–10 employees, acquired by OpenAI, with operating status closed.crunchbase.com · read 15 Oct 2026
- Company size and headquarters
- LinkedIn lists Context as a privately held applied-AI company headquartered in San Francisco with 11–50 employees.linkedin.com · read 15 Oct 2026
- Compute cost
- Sandbox time is not metered on Context plans, while Enterprise customers pay their cloud provider for compute.context.ai · read 8 Oct 2026
- Connector integrations
- Documented connectors include Slack, Google Workspace, Salesforce, Notion, Snowflake, GitHub, HubSpot, Linear, Zendesk, Box and Microsoft 365 services.context.ai · read 15 Oct 2026
- Credential handling
- Standing secrets are kept out of the sandbox; credentials are issued at the edge after authorization and expire with the action or run.context.ai · read 15 Oct 2026
- Credentials
- Standing secrets are not placed in the sandbox; credentials are injected at the edge after an authorization check.context.ai · read 8 Oct 2026
- Custom integrations
- Administrators can register internal HTTP or MCP services using a form or YAML and choose bearer, API-key, HMAC-SHA256 or OAuth 2 authentication.context.ai · read 15 Oct 2026
- Deployment
- Enterprise sandboxes run on the customer's Kubernetes cluster and can be installed through KOTS on EKS or AKS, including an air-gapped bundle.context.ai · read 8 Oct 2026
- Deployment options
- Enterprise deployments can run on managed infrastructure, a customer VPC, on-premises hardware or an air-gapped environment.context.ai · read 15 Oct 2026
- Desktop clients
- Context Desktop is offered for macOS, Windows and Linux, with signed or notarized macOS packages and 64-bit Windows and Linux installers.context.ai · read 15 Oct 2026
