Mosaic Sandbox Python SDK

mosaic-sandbox is the Python SDK and CLI for Mosaic Sandbox, a Firecracker-based runtime for coding agents.

Install:

python -m pip install mosaic-sandbox

Authenticate once with the CLI:

mos auth --token msk_live_...
mos whoami

Run the CLI smoke test:

mos doctor
mos run --template node-20 node -v
mos create --template node-20 --ssh
mos ssh <sandbox-id> --print-command

Or run the one-command first-run check:

mos smoke

Python example:

from mosaic_sandbox import Sandbox

sbx = Sandbox.create(
    template="node-20",
    endpoint="https://sandbox.mosaicos.com",
    api_token="msk_live_...",
    enable_ssh=False,
)

try:
    result = sbx.run_command("node -v")
    print(result.stdout)
    print(result.tti_ms)
finally:
    sbx.destroy()

LangChain and LlamaIndex tools

Give an agent a sandbox without writing tools for it. Neither framework is a dependency of this SDK; the one you use is imported when you ask for it.

from langchain.agents import create_react_agent
from mosaic_sandbox.integrations.langchain import mosaic_sandbox_tools

agent = create_react_agent(model, mosaic_sandbox_tools(template="python-3.11"))

from llama_index.core.agent import ReActAgent
from mosaic_sandbox.integrations.llamaindex import mosaic_sandbox_tools

agent = ReActAgent.from_tools(mosaic_sandbox_tools(), llm=llm)

The tools — mosaic_run_command, mosaic_run_python, mosaic_run_javascript, mosaic_read_file, mosaic_write_file, mosaic_list_files and mosaic_start_server — share one sandbox, created on the first call rather than when the agent is built. mosaic_start_server returns a public HTTPS preview URL, so "run the dev server and show me" is a single tool call.

Keyword arguments are Sandbox.create's, so snapshot_id= starts the agent in an environment you built earlier. Hold the SandboxToolset yourself if you want to close() it explicitly; close() destroys the sandbox it created but leaves a sandbox you passed in alone, and the toolset is spent either way — a later tool call raises rather than quietly starting a second machine.

Docs: https://sandbox.mosaicos.com/docs/

Release files for mosaic-sandbox 0.8.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for mosaic-sandbox 0.8.0
File	Size	Uploaded
mosaic_sandbox-0.8.0.tar.gz	116.3 kB	Aug 11, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for mosaic-sandbox 0.8.0
File	Interpreter	ABI	Platform	Reset
mosaic_sandbox-0.8.0-py3-none-any.whl 90.4 kB Aug 11, 2026	Python 3	none	any	Details

Total release size: 206.7 kB

Release files / mosaic_sandbox-0.8.0.tar.gz

Download URL	mosaic_sandbox-0.8.0.tar.gz
Size	116.3 kB
Tags	Source
SHA-256 checksum How to use checksums	`1d5054dfd3243ca3972eb6b5522a6c2c9738af3cc1580b56900ad92dc67e7f97`
BLAKE2b-256 checksum How to use checksums	`01c9f327b1be06b30bc86d3c042775eb9d2e4efc8258e8bb336c40240cfa98b0`
Upload date	Aug 11, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.13`

Release files / mosaic_sandbox-0.8.0-py3-none-any.whl

Download URL	mosaic_sandbox-0.8.0-py3-none-any.whl
Size	90.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`c1021ec6c90496d8d20f170cf376982204faf85e6dafab497151f89d3758e159`
BLAKE2b-256 checksum How to use checksums	`c700a5aeb039be2b89447907d2cca683206f32042327d8d10735644feec8526d`
Upload date	Aug 11, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.13`