Changelog
Every change to Runtime Cloud you can see or use, newest first: sandbox features, provider drop-ins, speed, prices, limits and SDK releases. Follow by RSS.
- Speed page: daily history charts and provider comparison
- CI/CD: a job that fails because its machine ran out of disk says so in its reason
- Speed: browser create time and rival providers, measured the same way
- Speed history by the hour and by the day
- Sandboxes: upload links replace files in root-owned folders
- Jobs: a vouch is no longer cleared by secrets scoped to other sandboxes by ID
- Keys: POST /v1/keys no longer slows down or returns 502 keys_unavailable in accounts with many keys
- API keys: keys Runtime creates for your builds, CI/CD checks, app versions, agent sessions and Actions runners no longer count toward the limit of 1,000 live keys per member
- Sandboxes: creates from an existing image no longer return 404 image_not_found for some accounts
- Sandboxes: creates no longer return 501 or an immediate 503 for some accounts
- Files: watches work in sandboxes created from the default image
- CI/CD: always run a pull request's own tests
- Parallel forks no longer return 503 busy while a snapshot copy arrives
- CI/CD checks every push of the branches you list
- Stopping a sandbox always completes
- Previews wait for a server that is still starting
- Forks of a sandbox in use no longer fail with sandbox_not_paused
- Forks succeed when the source is woken during the fork
- A failed fork deletes the copies it started
- getOrCreate always returns the one sandbox that holds a name
- Sandbox list pagination returns every page
- Pull request checks into non-default branches use at most half of an account's CI/CD machines
- Requests that a secret's rules do not allow now return 403 from Runtime
- Commands start faster in new sandboxes
- Egress secrets reach every new sandbox
- CI/CD setup can be a list of layers
- CI/CD: checks a release waits on get machines first
- CI/CD checks that run their setup start jobs immediately
- Usage export shows the carry on each outbound traffic row
- Agent sessions keep their task in the console after their history is archived
- The MCP server accepts newer protocol versions
- A job is no longer failed when its machine is paused by its host
- A check that times out while jobs wait for a machine reports "Could not run"
- A sandbox's lease counts from when it first runs
- Evictable sandboxes
- A sandbox waiting on its disk is no longer paused as idle
- Sandboxes: wakeOnTimers turns off timer wakes
- Free machine time in GET /v1/usage matches what a create is admitted on
- A wake that its server has no room for no longer stays in resuming
- Accounts with credit keep their remaining trial hours
- Sandboxes: a timer wakes a sandbox that paused while idle
- CI/CD: test only the packages and crates a pull request touches
- CI/CD: check only pull requests into the branches you list
- Free usage for accounts opened by email starts with a card
- Stricter checks on new email sign-ups
- One account per inbox when signing up by email
- Free machine time outside the listed regions starts with credit
- Free usage depends on the region an account was opened from
- Lower network limits for sandboxes without credit
- A wake of a sandbox moving to another server returns 409 sandbox_moving; terminals reattach without errors
- Accounts that have never paid are suspended for mining, port scans or internet sweeps
- Forks start on another server when the source's server is full
- A sandbox that stops responding is reported within 5 seconds, and a restart no longer reports a kept disk as deleted
- Usage export lists every running-disk charge, including amounts written off
- Woken sandboxes now end at their time limit
- Go, Java and Ruby SDKs: terminals and tunnels stay open when the API restarts
- Terminals, SSH sessions and port forwards stay open when the API restarts
- A request whose egress secret cannot be added returns 503 instead of sending the placeholder
- Commands keep running while a server prepares to pause a sandbox
- The audit log records your account's backup encryption key
- A command's output stream continues when its server pauses the sandbox
- Sandboxes paused for more than an hour resume in under a second
- Stopping a sandbox keeps writes made just before the stop, even when its agent is busy
- Sites that block by address are paced per outbound address
- A create whose sandbox is deleted while it starts returns 410 deleted
- Connections between your sandboxes are no longer reset in bursts
- Run virtual machines inside a sandbox with /dev/kvm
- Waking a sandbox keeps the egress CA its running processes trust
- Accepting an invitation adds you only to the account that invited you
- A sandbox at its memory limit stays reachable, and every process killed for memory is recorded
- Connections between your sandboxes are no longer held to upload limits
- CI/CD jobs stay queued until a machine begins them
- Sandboxes in a compartment reach each other by name
- Requests through a sandbox's web proxy no longer wait 40 ms on responses
- Speed figures are published only from live measurements
- Change a key's reach or daily limit over the API
- CI/CD reports a job lost with its machines as "Could not run"
- Sandboxes reach each other by name on every server
- The speed page is measured every minute, from outside, with the raw samples
- Every API response includes a Server-Timing header
- The CLI says when a newer version exists after it rejects an option
- Raising a job's timeout no longer requires changing its compute
- HTTPS through egress secrets and preview links keeps working after a sandbox moves to another server
- Sandboxes created from older images hold as many outbound connections as their limits allow
- Agents that start from a repository start their sessions
- A secret can now be given to the machine as its real value
- A failed agent session shows why in the console
- App deploys report live only when the address serves them
- CI/CD: built-in and light-sandbox steps record their result immediately
- GET http://runtime.internal/v1/identity/token returns 401 for a request token that is not the sandbox's current one
- Browsers start with Chromium already running
- An outbound connection that cannot reach Runtime's web proxy returns 503 Service Unavailable with the reason
- A sandbox with no time limit can be funded up to 12 hours ahead
- CI/CD: a cancelled check names the key that cancelled it, and your production branch's check gets machines sooner
- Slack triggers start agent sessions from a channel
- SSH to Runtime's own servers counts toward its own limit in the probing check
- A paid account's sandbox is reviewed by a person before it is halted
- A sandbox held by the abuse checks keeps its files readable
- A lease that ends without you never deletes a sandbox's disk
- CI/CD: built-in history checks finish immediately on production pushes
- Commands in sandboxes and App copies can open 65,536 files
- Move scheduled jobs from Trigger.dev, Inngest, Modal, Google Cloud Run and AWS Batch
- OpenTelemetry exports can send traces
- Sandbox metrics include disk and network
- Waking a sandbox paused moments earlier returns sooner
- API requests no longer return controller_standby during a controller release
- App and Function deploys go live, or fail immediately with a clear error
- Image deploys that cannot start fail with the reason
- Saving an egress secret returns in under half a second
- Status page hosted outside Runtime: status.withruntime.com
- Snapshots and forks of long-paused sandboxes
- A sandbox can run as root by default
- Pagination for secrets
- Clearer comparison and calculator pages
- New private networks and dedicated outbound addresses are temporarily unavailable
- Internet off with an allow list reaches the list
- A command's record says how it ended
- Volume backups go first, and one that can't start says so
- Pauses, wakes, restarts and stops are in the audit log
- Support chat asks you to sign in
- A sandbox's page in the console loads again
- Volume backups on your own schedule
- Sandboxes start from your larger images with no disk to name
- Upload links take the 5 GiB they say
- The usage export says how far it is final, in every SDK and the CLI
- E2B's client works in the drop-in
- Previews are never indexed
- First in line by plan when room is short
- A slow upload is given the time to arrive
- 30 days to top up
- A scheduled job keeps data between runs on a volume
- A full region answers 503, and an account at its limit 429
- Every error says whether to retry it, and its status means what HTTP says
- The SDKs read retryable
- Accounts without credit hold up to 10 API keys
- runtime.apps in the TypeScript SDK, for the Apps private beta
- Book room for a burst
- Booked room left unused costs a little
- Standing room for a pool
- Audit log entries older than 400 days are now removed
- Node trusts HTTPS from a sandbox's first command
- The CLI says when a certificate is not trusted
- runtime images build -f reads the Dockerfile as docker build does
- Apps and Functions: what Cloudflare's cache serves is outbound traffic (private beta)
- Storing several secrets at once no longer fails
- Sandbox desktop, browser, MCP servers and mounts in the console
- Faster website on phones
- Clearer page titles in search results
- CI/CD leaves no run "Waiting" on GitHub after its check ended
- A CI/CD check that can no longer finish now fails, with the reason
- Choose what happens when an App release gets worse (private beta)
- A job tells you when it fails, runs your image, and changes in place
- Every App has a readable address (private beta)
- A disk snapshot of a sandbox that is writing no longer fails
- A trust center for your security review
- Fly Machines API on Runtime
- Every router serves the same routes, and a copy stops only once none sends it visitors
- Functions in the CLI and the console (private beta)
- Snapshots kept while you have credit have no end date
- The Vercel-compatible snapshot's expiresAt
- The data processing addendum, privacy policy and subprocessors page say more, and say what is true today
- Keep-alive ends when its sandbox is deleted
- Storage is limited in GiB, not only counted
- Requests in flight grow to your sandbox quota
- A command may run 15,360 processes and threads
- Started copies are kept for images in use
- See which files a command read
- A paying account's stopped sandboxes keep their disk 30 days
- Turn an App's CDN off (private beta)
- Read and follow an App's logs (private beta)
- Sandboxes with egress secrets start under heavy load
- Request timeouts on sign-up and webhook routes
- The Prime Sandboxes drop-in follows 0.4.7
- Workers start from their coordinator's snapshots
- A scraping account no longer gets other accounts blocked
- MCP sandbox switch and resize refusals say what to do
- Jobs secrets belong to the key that stored them
- Ask support to stop our emails and get a straight answer
- Raise how many sandboxes run at once
- A sandbox paused for abuse stays paused until support lifts it
- A build on a busy server waits for room instead of failing
- Narrow a secret without its value
- Links to one file in a sandbox, with no API key
- Apps, Functions and Builds in the Go, Ruby and Java SDKs (private beta)
- GitHub App tokens, push limits and API budgets for secrets
- SDKs take a secret's GitHub App, push limits and API budgets
- Clear refusals instead of 500 errors on sandbox create
- API key limited to chosen sandboxes, approved in the browser
- Snapshot starts no longer stop for CPU on one server
- Apps console with traffic and live releases
- Move from Cloudflare Sandbox to Runtime
- A sandbox can name the secrets it gets
- One deletion email a day, not one per pause
- A secret that could not be added is no longer silent
- A worker's key runs its own Apps
- MCP: runtime_apps action deploy takes its id
- Snapshots and forks in bursts no longer wait running
- Secret scopes in the Python, Go, Ruby and Java SDKs
- Give a secret to one App's copies
- A sandbox out of memory still answers
- Upload stalled: a clear answer in 30 seconds, not a 503 after two minutes
- Fetch a web page in under a second with a paused browser
- Connection limit per site: 429 Too Many Requests from the egress proxy
- Identity tokens from any running sandbox
- No 429 for a busy key right after an update of Runtime
- Daytona's GPU and sort enums import from the drop-ins
- Idle sandboxes now pause after 5 minutes
- Browser starts in about 1 to 2 seconds in a new sandbox
- Give a sandbox a key without typing it into a command
- Swarm worker keys cannot reach scheduled jobs or their secrets
- A revoked worker's spend still counts against its maker's limit
- Run commands as root
- Keys limited to sandboxes
- .NET programs run
- Wake and restart wait for room
- API rate limit grows with your sandboxes
- Paused sandboxes keep their memory when many pause at once
- Console pages no longer hang
- Relabelling a sandbox into a secret's scope takes effect at once
- A job run that reaches its timeout ends as a timeout
- FUSE filesystems
- Identity tokens in Python and copied programs
- Private preview link expiry
- Enterprise features on the pricing page
- Retrying a create refused for no room
- Identity tokens in long-running programs
- Referral share after a refund or a lost dispute
- Someone leaving no longer deletes what they stored
- Faster console pages
- Pay per call credits even after an interruption
- Pause vs stop a sandbox
- Open a sandbox in your editor in one step
- Blaxel session default length
- Usage export and held credit
- HTTP/2 to the hosts your secrets name
- A restart runs the image's start command again
- Identity tokens in scheduled jobs, documented
- Hundreds of outbound connections, and a clear answer at every limit
- Keep sandboxes on separate servers
- A sandbox's time limit can be set or changed after it starts
- Custom domain on an App
- Referral and welcome matches always land
- Which stopped sandboxes lose their disk after three days
- pip install withruntime on Python 3.9
- GitHub API rate limit exceeded
- llms-full.txt names each page
- Listing sandboxes is faster
- Refer someone, not only a company
- Set up Runtime with one line for your coding agent
- Free hours card fits on every page
- MCP server instructions on first connect
- sandboxes run deletes its sandbox
- Volume restored from a backup stays put
- A paused sandbox wakes when its server can't take it
- Free account limits for backups, feedback and support
- Preview token expiry explained
- Sandbox environment changes and running programs
- Vouch for a scheduled job
- Code for the newest rival SDKs runs on Runtime
- A snapshot of a running sandbox answers sooner
- Images start where their base says
- Dockerfiles read more like Docker reads them
- Containers from slow registries start
- Prove a volume backup restores
- Creates from a snapshot no longer fail because its servers are full
- Dockerfile files are owned as Docker owns them
- Paid accounts get 1 TiB of sandbox disk
- An account without credit keeps 5 sandboxes
- Morph Cloud code runs on Runtime after one import
- Morph Cloud's Python code runs on Runtime too
- A reference on the page that did not load
- Making /workspace needs permission to write files
- A public preview's warning cannot be skipped from a link
- Image rebuilds get the newest base image
- Comparison tables that read cleanly
- Best sandbox for AI agents, compared
- Faster first paint on the website
- A worker's own workers share its daily limit
- A wallet account's key is never lost to a failed save
- A command on a paused sandbox starts sooner
- Cost breakdowns you can read at a glance
- MCP servers at a URL that never expires
- The console stays fast for busy accounts
- Your account's limits, from the API
- Agent-only wallet accounts top up, watch their credit and recover a lost key
- Swarm worker keys stay inside their own sandboxes
- Code interpreter cells and terminals show in a sandbox's commands
- mkdir -p /workspace through the files API is success
- Wallet accounts and the welcome match
- A key makes more keys over the API, with no browser
- The Python, Go, Java and Ruby SDKs no longer take a failure or a cut stream for a success
- Free usage is for trying Runtime, and a lower limit applies to every account at once
- Without credit, fewer sandboxes at once, and a few new limits
- Every limit is published, and an account with credit is charged, not capped
- A stop or delete never loses a snapshot or a sandbox's disk
- An agent with no shell can open and pay for an account over MCP
- No paid-or-trial choice in the SDKs
- A preview, port or private stream keeps going when you extend the time limit
- Pages in the console answer faster
- A slow command start no longer holds up the sandbox's other calls
- A short database outage no longer fails a start, stop, wake or delete
- A member an owner removed stays removed
- A wallet top-up that never reached the payment provider says so
- A secret can go to only some of your sandboxes
- Every account page is drawn from one kit
- Identity tokens work in a scheduled job's run
- Commands run in a sandbox at its open-connection limit
- A terminal or tunnel cut by its sandbox ending says so
- A full house names what it is waiting for
- A custom image's creates start faster
- An email before your sandboxes are deleted
- Deleting a sandbox the host had already removed completes
- The support chat shows what it is doing
- A quieter free hours card
- Pasted secrets and plural CLI options work
- A full snapshot count names its limit
- A new look for the console
- A scheduled job whose sandbox was deleted before it started runs again
- 100 free hours every month
- The Blaxel and Daytona drop-ins honour the create options they used to drop
- A busy sandbox's refusal keeps its own error
- Why a secret's placeholder arrived unchanged
- JavaScript cells with await keep their variables
- A paused sandbox that will not wake tells you what to do
- Clear words for an image limit below the base
- Know when your usage export is final
- Compartments
- An email when your credit is in
- Delete sandboxes by label
- Wallet top-ups say when they are off
- Storage reaches your usage export an hour sooner
- A code for a new account by email
- A paused sandbox tells you how to reach it
- A hundred sandboxes at once from the first top-up, and time limits up to 24 hours
- Downloads as fast as the server's link, and TCP ports five times faster
- A snapshot of a running sandbox, in one call, at any size
- What a sandbox serves is billed as outbound traffic, and persistence costs nothing extra
- More E2B code runs unchanged on withruntime/e2b
- A console that reports your day
- Each sandbox's commands, on its page
- Scheduled jobs
- Secrets for jobs
- The region is now us-east
- A sandbox from a browser
- Passkeys
- A Go SDK
- A Ruby SDK
- A Java SDK
- Faster starts, pauses and stops
- Persistence can be turned off, and a stopped persistent sandbox deleted
- Agents can list images, volumes, volume backups and snapshots
- Sandboxes from a custom image start in half a second
- A new console
- A 100-hour free trial
- Sandboxes up to 16 vCPUs and 64 GiB
- Faster network for paid sandboxes
- Outbound UDP to any port
- 50 sandboxes at once for a new paid account, then 100
- Rules on a secret
- Your own upstream proxy
- Custom images get sudo, adduser and useradd
- Close your account yourself
- Usage per run
- Disk bursts
- Volumes and snapshots are backed up off their server
- Faster default starts
- Python data tools are ready
- Identity and file permissions
- The code interpreter speaks seven languages
- Watch files
- Record the desktop
- MCP servers in a sandbox
- Terminals
- Mount your own bucket
- Single sign-on, free on every account
- SCIM directory sync
- Identity tokens for code in a sandbox
- Custom domains, TCP ports, dedicated outbound addresses and private networks
- MCP tools are renamed, a breaking change
- runtime_sandbox_exec takes a command as a list
- Switch in one import from Daytona and Vercel Sandbox too
- See what you save
- Works inside the agent tools you use
- Remote MCP with browser sign-in
- SSH, editors and port forwarding
- Pause answers at the freeze
- The SDKs wait for room
- Every sandbox command lives under runtime sandbox
- Custom images, all the way
- Metrics, events and webhooks
- Teams
- Audit log
- Paid sandboxes reach every port
- Secrets sandboxes never see
- Paused sandboxes wake on request
- Sandboxes by name
- Long-running sandboxes from every interface
- 50 free hours and 100 sandboxes at once
- Forks and snapshots for everyone
- Code written for E2B runs on Runtime
- SDKs work behind proxies and inside Cloudflare Workers
- Keys for CI from the terminal
- First commands in a fresh sandbox are faster
- A public status page
- Storage prices for snapshots, images and volumes
- Read your own limits
- Custom images
- Volumes
- Previews
- A desktop in any sandbox
- Code interpreter
- Network rules per sandbox
- Interactive terminals
- Read-only keys and daily spending limits
- Buy credit by card
- Referrals
- A 20-hour free trial
- One line connects your agent
- runtime run
- In the official MCP registry
- The withruntime package
- API 0.2.0
- A hundred commands at once
- Idle sandboxes pause themselves
- Ask support anywhere