Reported News
sandbox-mcp gives AI agents a throwaway Windows 11 machine to test apps, via CLI or MCP
sandbox-mcp is an MIT-licensed CLI and MCP server, created on GitHub on Nov 6, 2026, that automates Windows Sandbox so an agent can "Give your AI agent a brand-new Windows PC. Then throw it away." Its latest release was v1.2.0 (Nov 7, 2026), and the README says its measured GUI samples take roughly 40 to 50 seconds end to end.
- Changes reported
- 5
- listed below, each from a source we read
- We tested
- Not tested yet
- reported from sources; we did not run it ourselves
- Gaps we flag
- 3
- things we could not verify
- Sources
- 2
- 1 primary, linked below
What changed
| # | What the source says | Status |
|---|---|---|
| 01 | The tool boots a disposable Windows 11 guest in Windows Sandbox, deploys an app, drives it with native UI Automation (inspect, type, click, toggle, wait) and deletes the guest afterwards. The sbx CLI and the optional MCP adapter share one engine, per the README. | Reported |
| 02 | sbx deps scans an app on the host for missing runtimes without running it, and sbx run reports likely missing ones after a failed launch. The README's own example caught a missing VC++ redistributable on a fresh, network-off guest in 29.8 seconds. | Reported |
| 03 | Nothing is installed by default; --provision auto or an explicit list (.NET, desktop and ASP.NET Core runtimes, VC++, Windows App Runtime) installs runtimes downloaded and signature-checked on the host, and the report is marked PROVISIONED rather than a clean-machine pass. | Reported |
| 04 | Evidence stays on the host after the guest is destroyed: PNG screenshots, bounded recordings, a self-contained HTML viewer and optional MP4, plus exit codes, crash events, and installer and uninstaller diffs. | Reported |
| 05 | The README's comparison table lists a startup of about 15 seconds, no images to download, free use with Windows Pro or Enterprise, and one instance at a time. v1.2.0 ships a portable CLI with bundled Node.js, so no Node or npm install is needed. | Reported |
reported by the sourcemeasured or run by usnot verified
Primary source: sandbox-mcp repository and README (GitHub). We are the fast, independent index; the vendor’s own page is the source of record for this release.
In the source’s words
“Give your AI agent a brand-new Windows PC. Then throw it away.”
“If you need many machines, persistence, or Linux, use a VM or a cloud box.”
Early verdict
Worth a look if you ship Windows desktop apps and want an agent to check them on a clean PC; it needs Windows Pro or Enterprise and runs one sandbox at a time.
Basis: Based only on the project's README and releases page as read on Nov 8, 2026; we have not run it.
What we have not verified
- We did not install or run sandbox-mcp; the timings and test results are the project's own measurements from its README.
- We did not test the MCP adapter with any agent client, or check which Windows apps fail inside Windows Sandbox.
- The README itself says it is not a promise that every Windows app or hardware-dependent workload works in Sandbox.
This brief is Reported: written from the sources below, not from running the release ourselves.
Sources
- sandbox-mcp repository and README (GitHub)primary source · fetched 2026-11-08
- sandbox-mcp releases (GitHub)source · fetched 2026-11-08
Related
Spotted an error? See our corrections policy or email the address on the contact page. Markdown version for agents: /news/sandbox-mcp-windows-sandbox.md
Want these briefs in your Google Top Stories? Add Agentic Weekly as a preferred source on Google.
Newsletter
The Weekly Verdict. Free, every Monday.
A free email every Monday: the week's few big AI releases, then 5 short use cases for the new models, each with a prompt you can paste.
Free. Double opt-in. One click to unsubscribe.