npm i -g hotcell is a self-hostable sandbox SDK inspired by the Cloudflare Sandbox SDK, designed specifically to provide local sandboxes for AI agents on Mac, Linux, and bare metal devices.

Built to be exceptionally easy to use for both human engineers and AI agents, Hotcell offers granular control over resource capacity and token spending per sandbox. It enhances security by allowing you to default-deny network egress while still permitting access to LLM providers. Furthermore, your master API keys never enter individual sandboxes directly; instead, Hotcell generates ephemeral, per-sandbox tokens that automatically terminate when the sandbox stops.

Pros of npm i -g hotcell

Works on any device including Mac, Linux, and bare metal
Self-hostable SDK inspired by Cloudflare Sandbox SDK
Enhanced security with default-deny egress and access control for LLM providers
API keys are protected via ephemeral, per-sandbox tokens that die upon sandbox termination
Full control over capacity and token spend per sandbox

Cons of npm i -g hotcell

Requires self-hosting setup on local or bare metal infrastructure
Limited to environments supported by the SDK (Mac and Linux)
Requires command-line proficiency via npm installation

Frequently Asked Questions

What is npm i -g hotcell?

It is a self-hostable sandbox SDK inspired by the Cloudflare Sandbox SDK that provides local sandboxes for AI agents on Mac, Linux, and bare metal devices.

How does hotcell handle API key security?

API keys never directly enter each sandbox. Instead, hotcell creates per-sandbox tokens that automatically expire and die when the sandbox stops.

Can I control network access and token spending?

Yes, hotcell gives you full control over capacity and token spend per sandbox, and allows you to default-deny egress while selectively permitting access to LLM providers.