The state of AI coding agents in 2026
Something shifted in 2025. AI coding tools stopped being autocomplete and started being agents. They don't just suggest the next line — they read your codebase, plan changes across dozens of files, run tests, fix failures, and open pull requests. The shift from "copilot" to "colleague" happened faster than anyone expected.
The numbers tell the story:
- 4% of all GitHub commits are now authored by Claude Code alone, projected to reach 20%+ by year-end
- 85% of developers use AI coding tools daily
- 60% of new code will be AI-generated by end of 2026, per Gartner
- The AI coding tools market hit $12.8 billion, up from $5.1B two years ago
But there's a fundamental tension in how these tools work. Most agents run on your local machine — which means they're limited by your laptop's resources, they can't run in parallel, and they can see everything on your system. The agents that do run in the cloud built their own sandboxes, locking you into their ecosystem.
The major players and how they execute code
Every coding agent needs to execute code somewhere. That "somewhere" is the most important architectural decision in the stack, and it splits the market into three camps.
Camp 1: Local execution (your machine)
These agents run in your terminal or IDE and execute commands directly on your system. Fast, simple, and dangerous — they have access to everything you do.
| Agent | Type | Execution | Models | Key Strength |
|---|---|---|---|---|
| Claude Code | CLI + IDE | Local | Opus 4.6, Sonnet 4.6 | $2.5B+ run-rate. Agent Teams spawn parallel workers in git worktrees. 92% prefix cache reuse. |
| Gemini CLI | CLI | Local | Gemini 2.5 Pro / 3 | Open source (Apache 2.0). Free tier: 60 req/min, 1M+ token context. MCP support. |
| Aider | CLI | Local | Any LLM | Model-agnostic pair programmer. Auto git commits. Voice input. Free + open source. |
| OpenCode | CLI + IDE | Local | 75+ models | 120K+ GitHub stars. ACP-compatible with JetBrains, Zed, Neovim. |
| Goose | CLI + desktop | Local | Any LLM | By Block (Square). MCP-first extensibility. Apache 2.0. |
| Windsurf | IDE | Local | Multi-model | 1M+ users. Cascade agentic flow. Acquired by Cognition (Devin) for $250M. |
The problem with local execution is clear: you can't scale it. You can't run 50 Claude Code agents in parallel on your laptop. You can't give each agent an isolated environment where a bad rm -rf doesn't wipe your actual files. And you definitely can't let untrusted LLM-generated code execute with your SSH keys and AWS credentials in scope.
Camp 2: Cloud agents (their sandbox)
These tools bundle their own cloud execution environment. The agent runs on their infrastructure, not yours.
| Agent | Type | Execution | Models | Key Strength |
|---|---|---|---|---|
| OpenAI Codex | Cloud + CLI | Cloud containers | GPT-5.4 | 2M weekly users. Each task gets isolated container with repo pre-loaded. Internet disabled by default. |
| Devin | Cloud agent | Cloud sandbox | Proprietary v3 | 67% PR merge rate. Goldman Sachs, NASA as customers. $2.25/ACU (~$9/hr). |
| Cursor (Cloud) | IDE + cloud agents | Local + Cloud VMs | Multi-model | Up to 8 parallel agents in isolated Ubuntu VMs. Self-hosted option for enterprises. |
| GitHub Copilot | IDE + cloud agent | Local + Actions | Multi-model | ~37% market share. Cloud agent uses GitHub Actions runners. Starts 50% faster (March 2026). |
| Google Jules | Cloud agent + CLI | Cloud VMs | Gemini 2.5 Pro | Async agent: delegate backlog tasks. Jules API for custom integrations. |
| Amazon Q | IDE + agent | Docker sandbox | AWS models | Deep AWS integration. Custom Docker images. Devfile-based env config. |
Cloud agents solve the isolation and parallelism problems, but create a new one: lock-in. You can't run Devin's sandbox with Claude's model. You can't use Cursor's VMs from a LangChain script. Each tool built its own walled garden.
Camp 3: Frameworks (bring your own compute)
Agent-building frameworks let you wire any model to any tools — but they don't provide the execution environment. That's your problem.
| Framework | Stars | Differentiator | Provides Sandbox |
|---|---|---|---|
| CrewAI | 44K+ | Role-based multi-agent DSL. Lowest learning curve. | No |
| LangGraph | 24K+ | Directed graph workflows. 47M+ PyPI downloads. Maximum flexibility. | No |
| OpenAI Agents SDK | 19K+ | Lightweight. Tight OpenAI integration. | No |
| Google ADK | 17K+ | Stateful multi-agent workflows. Optimized for Gemini. | No |
| Claude Agent SDK | -- | Tool-use-first. Built-in shell + file tools. | Shell only |
| OpenHands | 69K+ | Model-agnostic coding agent platform. E2B integration. | Via plugins |
This is the gap. If you're building agents with LangChain, CrewAI, or the OpenAI Agents SDK, you need somewhere safe for them to execute code, browse the web, and interact with applications. You need to give them a computer.
The problem: agents without environments
When your agent needs to do any of these things, "just run it locally" stops working:
- Parallel execution — 50 agents researching 50 topics simultaneously, each in their own browser
- Untrusted code — LLM-generated code that might
rm -rf /or exfiltrate secrets - Browser automation — headless Chrome instances for web scraping, form filling, or testing
- Desktop interaction — GUI applications that require a display server (spreadsheets, design tools)
- Multi-tenant isolation — each customer's agents in separate environments with billing
- Long-running tasks — overnight research agents that outlive your laptop's battery
- Reproducibility — consistent environments across runs, not "works on my machine"
Stop thinking of AI agents as software that runs in a process. Think of them as remote workers who need a workstation. A browser. A terminal. A desktop. A file system. Cost tracking. An IT department. That's the infrastructure layer that's missing.
The sandbox layer: what it looks like
The solution is a compute layer between your agent framework and the cloud. Your agent sends API calls ("create a browser", "execute this command", "save this file"), and gets back an isolated environment with its own resources.
Three types of environments cover virtually every agent workload:
Browsers — for web agents
Headless Chrome or Firefox instances your agent controls via the Chrome DevTools Protocol (CDP). Navigate pages, click buttons, fill forms, extract data. Each browser is an isolated cloud container with its own IP, session, and resource limits.
Terminals — for coding agents
Full Linux environments backed by EC2 instances. Your agent gets root access, persistent storage, any package manager, every language runtime. Sandboxes survive reboots and persist files between sessions.
Desktops — for GUI agents
Full Linux desktops with XFCE or KDE, accessible via browser. Your agent sees the screen, moves the mouse, types on the keyboard. For spreadsheets, design tools, legacy applications — anything that needs a display.
Which agents need external compute
Not every agent needs an external sandbox. Here's how to think about it:
| Agent / Framework | Has Own Sandbox | Needs External Compute | Why |
|---|---|---|---|
| Claude Code | No | Yes | Runs locally. Agent Teams need parallel isolated envs. |
| Gemini CLI | No | Yes | Runs locally. No isolation. |
| Aider / OpenCode / Goose | No | Yes | All local. Need sandbox for untrusted code. |
| LangChain / CrewAI / Agents SDK | No | Yes | Frameworks only. BYOC (bring your own compute). |
| OpenHands | Plugin | Yes | Supports E2B and Docker. Needs a sandbox provider. |
| OpenAI Codex | Yes | For extra envs | Cloud mode has containers. CLI mode doesn't. |
| Devin | Yes | No | Fully bundled cloud environment. |
| Cursor Cloud | Yes | Self-hosted option | Provides VMs, but enterprises can self-host. |
| GitHub Copilot | Yes | No | Uses GitHub Actions runners. |
The pattern is clear: local-first agents and agent frameworks are the biggest market for external sandbox infrastructure. And they're also the fastest-growing segment — Claude Code alone has 18.9M monthly active users running locally.
Common integration patterns
There are three ways agents typically use sandbox infrastructure:
Pattern 1: Tool-calling (most common)
The agent framework calls sandbox APIs as "tools" within the agent loop. The LLM decides when to execute code, browse a page, or save a file.
Pattern 2: Session-per-task
Spin up an environment at the start of a task, use it for the duration, tear it down when done. Best for discrete jobs like "research this topic" or "fix this bug".
Pattern 3: Parallel fan-out
Launch N environments simultaneously, each running an independent agent. Collect results when all finish. Best for research, scraping, and batch processing.
What it actually costs
The cost model for agent compute is simple: you pay for what you use, by the hour or minute.
| Environment | Spec | Cost/hr | Typical Task Duration | Cost/Task |
|---|---|---|---|---|
| Browser (Chrome) | 1 vCPU, 2 GB | $0.04 | 5-15 min | $0.003-0.01 |
| Ephemeral (Python) | 0.5 vCPU, 1 GB | $0.02 | 1-10 min | $0.001-0.003 |
| Sandbox (ab0t.micro) | 2 vCPU, 1 GB | $0.01 | 30-120 min | $0.005-0.02 |
| Sandbox (ab0t.medium) | 2 vCPU, 4 GB | $0.04 | 30-120 min | $0.02-0.08 |
| Desktop (XFCE) | 2 vCPU, 4 GB | $0.06 | 15-60 min | $0.015-0.06 |
| GPU (ab0t.gpu) | 4 vCPU, 16 GB, T4 | $0.53 | 10-60 min | $0.09-0.53 |
For comparison: Devin charges $2.25 per ACU (~15 min of work, so ~$9/hr). Cursor cloud agents are included in the $200/month plan. Running your own sandbox infrastructure gives you transparent, per-second pricing without bundled margins.
MCP: the universal connector
The Model Context Protocol (MCP), donated to the Linux Foundation by Anthropic in December 2025, is becoming the standard way agents connect to external tools. Every major player supports it: Claude Code, Cursor, Gemini CLI, OpenAI Codex, JetBrains IDEs.
An MCP server for sandbox access means any MCP-compatible agent can create environments, execute code, and browse the web without custom integration code. One protocol, every agent.
If you're building agents today, pick a sandbox provider with an API. If MCP support matters (and it should), look for one that publishes an MCP server. You'll be able to swap between Claude, GPT, Gemini, and open-source models without changing your compute layer.
What to read next
This article is the landscape overview. The rest of this guide series goes deep on specific use cases:
- Your First AI Agent Sandbox — Create a sandbox, run a command, see it work. 60 seconds start to finish.
- Headless Browser for AI Agents — Connect Playwright to a cloud browser via CDP. Navigate, click, extract.
- Connect a LangChain Agent — Wire sandbox tools into a LangChain ReAct loop.
- Parallel Agents at Scale — Run 100 agents simultaneously with fan-out/fan-in orchestration.
- Cost Control at Scale — Per-user limits, auto-stop, budget alerts. Don't get surprised.
Give your agent a computer
Browsers, terminals, and desktops. Isolated, metered, instant. Start free.
Get Started