Observed arrival · 2026-11-05
moatbox puts coding agents in a gated sandbox
A CLI and hosted environment for running Claude Code, Codex, and opencode in isolated boxes, with integrated tools and human approval for risky actions.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers running coding agents against real repositories and services
- Worth noticing
- The page says real integration tokens stay outside each sandbox, while risky calls such as deletes, refunds, and force-pushes pause for approval.
Field notes
Commands shown include `moatbox run -broker github codex ...`, `timeline`, `undo`, and `deploy`; the page says each agent gets its own gVisor sandbox and integrations use tokens kept outside it. Hosted tiers meter capacity in “space-hours,” defined as a 2 vCPU, 2 GB box running for an hour; a 4 vCPU, 8 GB box counts as two. The Team plan lists mid-run forking as “soon,” not as an available feature.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue