Landscape March 2026 15 min read

AI Coding Agents Need Computers.
Most of Them Don't Have One.

Claude Code, OpenAI Codex, Devin, Cursor, and dozens of open-source agents are writing code autonomously. But most of them still run on your laptop. Here's why that's changing, what the landscape looks like in 2026, and how to give any agent its own isolated environment.

The state of AI coding agents in 2026

Something shifted in 2025. AI coding tools stopped being autocomplete and started being agents. They don't just suggest the next line — they read your codebase, plan changes across dozens of files, run tests, fix failures, and open pull requests. The shift from "copilot" to "colleague" happened faster than anyone expected.

The numbers tell the story:

But there's a fundamental tension in how these tools work. Most agents run on your local machine — which means they're limited by your laptop's resources, they can't run in parallel, and they can see everything on your system. The agents that do run in the cloud built their own sandboxes, locking you into their ecosystem.

The major players and how they execute code

Every coding agent needs to execute code somewhere. That "somewhere" is the most important architectural decision in the stack, and it splits the market into three camps.

Camp 1: Local execution (your machine)

These agents run in your terminal or IDE and execute commands directly on your system. Fast, simple, and dangerous — they have access to everything you do.

AgentTypeExecutionModelsKey Strength
Claude Code CLI + IDE Local Opus 4.6, Sonnet 4.6 $2.5B+ run-rate. Agent Teams spawn parallel workers in git worktrees. 92% prefix cache reuse.
Gemini CLI CLI Local Gemini 2.5 Pro / 3 Open source (Apache 2.0). Free tier: 60 req/min, 1M+ token context. MCP support.
Aider CLI Local Any LLM Model-agnostic pair programmer. Auto git commits. Voice input. Free + open source.
OpenCode CLI + IDE Local 75+ models 120K+ GitHub stars. ACP-compatible with JetBrains, Zed, Neovim.
Goose CLI + desktop Local Any LLM By Block (Square). MCP-first extensibility. Apache 2.0.
Windsurf IDE Local Multi-model 1M+ users. Cascade agentic flow. Acquired by Cognition (Devin) for $250M.

The problem with local execution is clear: you can't scale it. You can't run 50 Claude Code agents in parallel on your laptop. You can't give each agent an isolated environment where a bad rm -rf doesn't wipe your actual files. And you definitely can't let untrusted LLM-generated code execute with your SSH keys and AWS credentials in scope.

Camp 2: Cloud agents (their sandbox)

These tools bundle their own cloud execution environment. The agent runs on their infrastructure, not yours.

AgentTypeExecutionModelsKey Strength
OpenAI Codex Cloud + CLI Cloud containers GPT-5.4 2M weekly users. Each task gets isolated container with repo pre-loaded. Internet disabled by default.
Devin Cloud agent Cloud sandbox Proprietary v3 67% PR merge rate. Goldman Sachs, NASA as customers. $2.25/ACU (~$9/hr).
Cursor (Cloud) IDE + cloud agents Local + Cloud VMs Multi-model Up to 8 parallel agents in isolated Ubuntu VMs. Self-hosted option for enterprises.
GitHub Copilot IDE + cloud agent Local + Actions Multi-model ~37% market share. Cloud agent uses GitHub Actions runners. Starts 50% faster (March 2026).
Google Jules Cloud agent + CLI Cloud VMs Gemini 2.5 Pro Async agent: delegate backlog tasks. Jules API for custom integrations.
Amazon Q IDE + agent Docker sandbox AWS models Deep AWS integration. Custom Docker images. Devfile-based env config.

Cloud agents solve the isolation and parallelism problems, but create a new one: lock-in. You can't run Devin's sandbox with Claude's model. You can't use Cursor's VMs from a LangChain script. Each tool built its own walled garden.

Camp 3: Frameworks (bring your own compute)

Agent-building frameworks let you wire any model to any tools — but they don't provide the execution environment. That's your problem.

FrameworkStarsDifferentiatorProvides Sandbox
CrewAI44K+Role-based multi-agent DSL. Lowest learning curve.No
LangGraph24K+Directed graph workflows. 47M+ PyPI downloads. Maximum flexibility.No
OpenAI Agents SDK19K+Lightweight. Tight OpenAI integration.No
Google ADK17K+Stateful multi-agent workflows. Optimized for Gemini.No
Claude Agent SDK--Tool-use-first. Built-in shell + file tools.Shell only
OpenHands69K+Model-agnostic coding agent platform. E2B integration.Via plugins

This is the gap. If you're building agents with LangChain, CrewAI, or the OpenAI Agents SDK, you need somewhere safe for them to execute code, browse the web, and interact with applications. You need to give them a computer.

The problem: agents without environments

When your agent needs to do any of these things, "just run it locally" stops working:

The mental model shift:

Stop thinking of AI agents as software that runs in a process. Think of them as remote workers who need a workstation. A browser. A terminal. A desktop. A file system. Cost tracking. An IT department. That's the infrastructure layer that's missing.

The sandbox layer: what it looks like

The solution is a compute layer between your agent framework and the cloud. Your agent sends API calls ("create a browser", "execute this command", "save this file"), and gets back an isolated environment with its own resources.

Your Agent Sandbox API Browser / Terminal / Desktop

Three types of environments cover virtually every agent workload:

Browsers — for web agents

Headless Chrome or Firefox instances your agent controls via the Chrome DevTools Protocol (CDP). Navigate pages, click buttons, fill forms, extract data. Each browser is an isolated cloud container with its own IP, session, and resource limits.

# Launch a Chrome browser for your agent curl -X POST https://sandbox.dev.ab0t.com/api/browsers \ -H "Authorization: Bearer $API_KEY" \ -H "Content-Type: application/json" \ -d '{"browser_type": "chrome", "idle_timeout_minutes": 30}' # Response includes cdp_url for Playwright/Puppeteer connection # {"container_id": "ctr-a1b2c3", "cdp_url": "ws://...", "access_url": "https://..."}

Terminals — for coding agents

Full Linux environments backed by EC2 instances. Your agent gets root access, persistent storage, any package manager, every language runtime. Sandboxes survive reboots and persist files between sessions.

# Create a sandbox with Python and Node pre-installed curl -X POST https://sandbox.dev.ab0t.com/api/sandboxes \ -H "Authorization: Bearer $API_KEY" \ -H "Content-Type: application/json" \ -d '{"name": "agent-workspace", "instance_type": "ab0t.medium", "auto_stop_minutes": 60}' # Execute commands curl -X POST https://sandbox.dev.ab0t.com/api/sandboxes/$ID/execute \ -H "Authorization: Bearer $API_KEY" \ -d '{"command": "git clone https://github.com/user/repo && cd repo && python -m pytest"}'

Desktops — for GUI agents

Full Linux desktops with XFCE or KDE, accessible via browser. Your agent sees the screen, moves the mouse, types on the keyboard. For spreadsheets, design tools, legacy applications — anything that needs a display.

# Launch a desktop with XFCE curl -X POST https://sandbox.dev.ab0t.com/api/desktops \ -H "Authorization: Bearer $API_KEY" \ -H "Content-Type: application/json" \ -d '{"desktop_type": "alpine-xfce"}' # Response includes public_url for VNC/noVNC access # Your agent takes screenshots and sends mouse/keyboard events

Which agents need external compute

Not every agent needs an external sandbox. Here's how to think about it:

Agent / FrameworkHas Own SandboxNeeds External ComputeWhy
Claude CodeNoYesRuns locally. Agent Teams need parallel isolated envs.
Gemini CLINoYesRuns locally. No isolation.
Aider / OpenCode / GooseNoYesAll local. Need sandbox for untrusted code.
LangChain / CrewAI / Agents SDKNoYesFrameworks only. BYOC (bring your own compute).
OpenHandsPluginYesSupports E2B and Docker. Needs a sandbox provider.
OpenAI CodexYesFor extra envsCloud mode has containers. CLI mode doesn't.
DevinYesNoFully bundled cloud environment.
Cursor CloudYesSelf-hosted optionProvides VMs, but enterprises can self-host.
GitHub CopilotYesNoUses GitHub Actions runners.

The pattern is clear: local-first agents and agent frameworks are the biggest market for external sandbox infrastructure. And they're also the fastest-growing segment — Claude Code alone has 18.9M monthly active users running locally.

Common integration patterns

There are three ways agents typically use sandbox infrastructure:

Pattern 1: Tool-calling (most common)

The agent framework calls sandbox APIs as "tools" within the agent loop. The LLM decides when to execute code, browse a page, or save a file.

# LangChain tool example from langchain.tools import tool @tool def execute_code(command: str) -> str: """Execute a shell command in the agent's sandbox.""" resp = requests.post( f"{SANDBOX_URL}/api/sandboxes/{sandbox_id}/execute", json={"command": command}, headers={"Authorization": f"Bearer {api_key}"} ) result = resp.json() return f"exit={result['exit_code']}\n{result['stdout']}\n{result['stderr']}"

Pattern 2: Session-per-task

Spin up an environment at the start of a task, use it for the duration, tear it down when done. Best for discrete jobs like "research this topic" or "fix this bug".

# Create environment -> do work -> clean up sandbox = create_sandbox(name="bug-fix-1234", auto_stop_minutes=30) result = execute(sandbox.id, "git clone repo && cd repo && git checkout fix-branch") result = execute(sandbox.id, "python -m pytest tests/ -x") # ... agent iterates until tests pass ... delete_sandbox(sandbox.id)

Pattern 3: Parallel fan-out

Launch N environments simultaneously, each running an independent agent. Collect results when all finish. Best for research, scraping, and batch processing.

# Fan out: 20 browser agents researching 20 companies tasks = [] for company in companies: browser = create_browser(browser_type="chrome") tasks.append(research_agent.run(browser.cdp_url, company)) results = await asyncio.gather(*tasks) # Each agent navigated real websites, extracted data, and returned findings # Cost: 20 browsers x 15 min x $0.1/hr = ~$0.50 total

What it actually costs

The cost model for agent compute is simple: you pay for what you use, by the hour or minute.

EnvironmentSpecCost/hrTypical Task DurationCost/Task
Browser (Chrome)1 vCPU, 2 GB$0.045-15 min$0.003-0.01
Ephemeral (Python)0.5 vCPU, 1 GB$0.021-10 min$0.001-0.003
Sandbox (ab0t.micro)2 vCPU, 1 GB$0.0130-120 min$0.005-0.02
Sandbox (ab0t.medium)2 vCPU, 4 GB$0.0430-120 min$0.02-0.08
Desktop (XFCE)2 vCPU, 4 GB$0.0615-60 min$0.015-0.06
GPU (ab0t.gpu)4 vCPU, 16 GB, T4$0.5310-60 min$0.09-0.53

For comparison: Devin charges $2.25 per ACU (~15 min of work, so ~$9/hr). Cursor cloud agents are included in the $200/month plan. Running your own sandbox infrastructure gives you transparent, per-second pricing without bundled margins.

MCP: the universal connector

The Model Context Protocol (MCP), donated to the Linux Foundation by Anthropic in December 2025, is becoming the standard way agents connect to external tools. Every major player supports it: Claude Code, Cursor, Gemini CLI, OpenAI Codex, JetBrains IDEs.

An MCP server for sandbox access means any MCP-compatible agent can create environments, execute code, and browse the web without custom integration code. One protocol, every agent.

What this means for you:

If you're building agents today, pick a sandbox provider with an API. If MCP support matters (and it should), look for one that publishes an MCP server. You'll be able to swap between Claude, GPT, Gemini, and open-source models without changing your compute layer.

What to read next

This article is the landscape overview. The rest of this guide series goes deep on specific use cases:

Give your agent a computer

Browsers, terminals, and desktops. Isolated, metered, instant. Start free.

Get Started