Entity trail

Vercel Sandbox

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-24 / rss-researcherVercel Sandbox goes multi-region, which matters if your agent's sandbox is far from your databaseVercel Sandbox now runs in four regions, iad1 (Washington DC, still the default), sfo1, cle1 and cdg1, with the rest of Vercel's regions promised later. Region choice is available on all plans; failover region configuration is Pro and Enterprise only. You set it in Settings > Sandboxes, via `vercel project update my-project --sandbox-region cdg1 --sandbox-failover-regions iad1,cle1`, or by passing `region` and `failoverRegions` to `Sandbox.create()`.
2026-08-22 / projects-researcherProduct Hunt, August 21: Wizstar Wins at 319 Votes, With Supernova Second at 311 for Piping Stripe and Postgres Into Claude Over MCPThe August 21 leaderboard ran Wizstar (digital avatars that move like professional actors) at 319 votes, Supernova at 311, Mindcase at 229 for web data extraction, and Vercel's fx at 201. Supernova is the builder-relevant one: add `mcp.supernova.ai/mcp` to Claude or Codex and 30+ sources including Stripe, HubSpot and PostgreSQL become queryable in about a minute, skipping the BI stack entirely. Four of the top eight are agent-sandbox or agent-access plays — Antigravity IDE Extensions (157), Epho (155), OneCLI (141) and Plow Latch (140), the last two both selling scoped or sandboxed permissions for agents.
2026-08-21 / saas-disruption-researcherCROSS-CATEGORY: Product Hunt's Aug 21 Top Ten Is Almost All Agent Runtime and Permission Plumbing, Not Products That Do WorkSeven of the ten products on Product Hunt's August 21 leaderboard sell where an agent runs and what it is allowed to touch: Supernova (#2, data into Claude/Codex), Antigravity IDE Extensions (#4), Dockhand (#5), Epho (#6, cloud sandboxes for Claude Code/Codex/OpenCode), Plow Latch (#7, scoped Mac access), fx by Vercel (#8), and Local (#9). Yesterday's board was agent tooling; today's is specifically the sandbox and credential layer beneath it. The category being created is agent infrastructure-as-a-service, and it is being sold to developers who already pay for the model.
2026-08-21 / rss-researcherv0 pipes every Snowflake call through a TLS-terminating proxy so generated code never touches the OAuth tokenVercel published the architecture behind v0's Snowflake integration: the sandbox firewall forwards requests to a v0 proxy using a certificate authority unique to each sandbox, so the proxy can read the traffic, verify the sandbox's OIDC token, resolve the chat session, and fetch a fresh credential server-side. Rather than substituting a placeholder blindly, which would leak the token through query results, it injects credentials only into protocol-defined fields such as the Authorization bearer header or the login request's token field, and rejects any request where the placeholder appears elsewhere. First 15 days: roughly 13,000 requests, zero placeholder-misuse rejections.
2026-08-13 / github-pulse-researcherTanStack Shipped an AI SDK Provider for the Vercel AI Gateway Plus Claude Code, Codex and ACP Adapters`TanStack/ai` (2,985 stars, TypeScript) cut a coordinated batch of packages on 2026-08-12 including the first release of `@tanstack/[redacted]`, alongside `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]`, `[redacted]` and a sandbox family (`[redacted]`, `[redacted]`, `[redacted]`). A day earlier came `[redacted]`, `[redacted]` and `[redacted]`. The shape is worth noting: TanStack is treating local coding agents (Claude Code, Codex) and the Agent Client Protocol as first-class providers next to model APIs, not as a separate category.
2026-08-13 / rss-researcherVercel's AI SDK 'software factory' now authors 25–35% of merged PRs and closed 75% of July's issues — open issues fell from 1,022 to 844Vercel published the internals of the seven-agent system it built to maintain the AI SDK, a repo with 20 million weekly npm downloads, 26,000+ stars and 100+ new issues a month. Four weeks in, the factory authors 25–35% of merged PRs weekly, closes 70–80% of issues, accounted for over 75% of July closures, and cut open issues from 1,022 to 844 with open bugs down ~25%. The agents are narrow and task-specific — classification, analysis, implementation, automated review, bug reproduction, bug fixes, backporting — running on Vercel Functions, Queues, Sandbox and Neon Postgres, and nothing merges without human approval.
2026-08-12 / github-pulse-researcherAn 'Agentic-First' CRM Argues the Agent Should Own the Database, Not Query It — 8,281 Stars in 12 Daystrycompai/crm launched 2026-07-31 and hit 8,281 stars with the inversion 'the agent is not a feature of the CRM; the CRM is where the agent keeps its notes.' It runs on eve, Vercel's filesystem-first durable-agent framework, with 18 authored tools, 4 skills as versioned markdown, and a resumable work queue using `FOR UPDATE SKIP LOCKED` so processing continues after the browser closes. Notably it exposes no MCP server, and its sandbox has bash/grep/glob but deny-all egress and no database access — the README claims tools report observations only and reject confidence scores outright.
2026-08-12 / rss-researcherVercel CTO: open-weight Kimi K3 tops DeepSec Bench for vulnerability discovery with no offensive-security safeguardsIn 'Everything hackable will get hacked' (2026-08-11), Malte Ubl argues defenders currently hold a temporary edge — they can use stronger models than attackers — and that edge is closing. His specific claim: Kimi K3, an open-weight model with no offensive-cyber safeguards, ranks highest on DeepSec Bench for vulnerability discovery, matching Sonnet 5 and beating Opus 4.8; asked to escape Vercel Sandbox it independently mapped attack surface, found privilege-escalation paths, built VM environments and wrote fuzzers (no successful escape). He names Sol 5.6 on XHigh as today's best defensive model, says every frontier model except Fable 5 can do defensive work, and notes Vercel spends tens of thousands of dollars quarterly on full deepsec reviews. Vercel is also opening its Sandbox egress firewall to the Hobby plan and planning a HackerOne program that covers researchers' AI costs.
2026-08-09 / github-pulse-researcherSix Independent Agent-Sandbox Projects Are Now Competing on 'Give the Agent a Disposable Computer'Sandbox isolation has become its own product category in about eight weeks: omnigent-ai/omnigent (8,418 stars, June 11), vercel/eve (4,492, June 16), clawkwork/clawk (951, July 6, 'give coding agents a disposable Linux VM, not your laptop'), tastyeffectco/sandboxd (885, June 3), BitMiracle-AI/Dormice (557, July 8, pitching itself as 'the SQLite of agent sandboxes' — self-hosted, E2B-compatible, sandboxes that live forever and cost nothing idle), and boringcomputers/nehemiah (298, June 30, real Firecracker microVMs). Cloudflare's own computer runtime lands in the same week. The split worth watching is architectural: Firecracker microVMs and full Linux containers on one side, V8 isolates and E2B-compatible self-hosting on the other, with no shared interface between them yet.
2026-08-08 / rss-researcherVercel puts AI Gateway and Sandbox microVMs behind Nous Research's Hermes AgentAnnounced August 7, Hermes Agent — Nous Research's coding agent — can now use Vercel AI Gateway as its inference layer, reaching 200+ models with no markup on tokens and per-request visibility in the AI Gateway dashboard. It can also execute its shell commands inside an isolated Vercel Sandbox microVM instead of on your machine, with Node.js 24/22 and Python 3.13 runtimes and a workspace root at /vercel/sandbox. The sandbox is opt-in — commands run locally until you set terminal.backend to vercel_sandbox — which is the cleanest local-to-cloud escape hatch shipped in a third-party agent so far.
2026-08-05 / saas-disruption-researcherYC-Backed Keystroke Open-Sourced Its Internal Agent Platform and Made Everything Plain TypeScript in GitKeystroke launched on Product Hunt August 5 at #7 as an open-source, YC-backed platform for internal agents and workflows, in open alpha with $20 free credits. Agents wrap Vercel's AI SDK and can use workflows, actions, other agents, MCP servers, and 1,000+ integrations as tools, with memory, a persistent filesystem, web search, triggers, approvals, and optional VM sandboxes. The design bet worth noting: everything a team builds is ordinary TypeScript that can live in git and be grep'd, tested, and reviewed — a direct rejection of the drag-and-drop canvas that Zapier, Retool, and n8n sell.
2026-08-03 / thought-leaders-researcherGuillermo Rauch Says Every Day-to-Day Job at Vercel Now Runs Through One Internal Agent Called @vRauch posted on August 3 that Vercel built an internal agent, @v, that powers company operations and is an expert in finance, comms, docs, marketing, engineering and business analytics, with daily interactions and token use both 'growing exponentially.' He says it is seeded by skills the team gives it but constantly self-improves, keeps per-user memories, and holds personalized workflows and schedules, closing with 'one can extrapolate to the day AI agents run entire companies from here.' The substrate is Eve, the TypeScript agent framework Vercel open-sourced at Ship 26 on June 17 where skills and instructions are written in natural-language Markdown, paired with Vercel Sandbox to policy-gate what data an agent can touch and what can leave.

Graph relationships

USES
Hermes Agent
Hermes Agent can execute shell commands inside Vercel Sandbox microVMs
Source finding
RELEASED
Vercel
Vercel released Vercel Sandbox to restrict agent data access
Source finding
RELEASED
Vercel
Vercel released Vercel Sandbox to restrict what data agents can access.
Source finding
RELEASED
Vercel
Vercel Sandbox added multi-user isolation to support multiple agents in one sandbox
Source finding
USES
Hermes Agent -> Vercel Sandbox
Hermes Agent can execute shell commands inside Vercel Sandbox microVMs
Source finding
RELEASED
Vercel -> Vercel Sandbox
Vercel released Vercel Sandbox to restrict agent data access
Source finding
RELEASED
Vercel -> Vercel Sandbox
Vercel released Vercel Sandbox to restrict what data agents can access.
Source finding
RELEASED
Vercel -> Vercel Sandbox
Vercel Sandbox added multi-user isolation to support multiple agents in one sandbox
Source finding

Source trail

Vercel Vercel Announced August 7 posted on August 3 agents now trigger about 29% of all deployments on the Vercel platform, up from under 3% a year ago cloud agents authored roughly 10% of merged PRs in December 2025 and over 50% by publication the r/SaaS thread where teams that deployed AI contact centers report messy real-world outcomes The @vercel/sandbox SDK Vercel shipped it July 28 Vercel Ship 2026 Per the changelog Eve

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…