--- description: Connect a Flue agent to an application-owned Vercel Sandbox environment. title: Vercel Sandbox | Flue image: https://flueframework.com/docs/og4.jpg --- # Vercel Sandbox Last updated May 30, 2026[View as Markdown](https://nightly.flueframework.com/docs/ecosystem/sandboxes/vercel/index.md) The Vercel Sandbox adapter adapts an initialized `@vercel/sandbox` `Sandbox` into Flue’s sandbox interface. Use it when application code should execute agent work inside a Vercel-managed sandbox rather than on its host filesystem. ## Quickstart Add managed Linux sandbox capability to an existing Flue project with the [Vercel Sandbox](https://vercel.com/sandbox) blueprint. Run the following command in your terminal or coding agent of choice: ```bash flue add sandbox vercel ``` ## Overview The blueprint installs `@vercel/sandbox` when needed and creates `sandboxes/vercel.ts` in your source-root. The generated adapter accepts an initialized Vercel `Sandbox`; authentication, runtime selection, retention, and cleanup remain application-owned. ```ts // flue-blueprint: sandbox/vercel@1 import { createSandboxSessionEnv, useModel } from '@flue/runtime'; import type { SandboxApi, SandboxFactory, SessionEnv, FileStat } from '@flue/runtime'; import type { Sandbox as VercelSandbox } from '@vercel/sandbox'; class VercelSandboxApi implements SandboxApi { constructor(private sandbox: VercelSandbox) {} /* ... generated filesystem operations using sandbox.fs ... */ async stat(path: string): Promise { const stat = await this.sandbox.fs.stat(path); return { isFile: stat.isFile(), isDirectory: stat.isDirectory(), isSymbolicLink: stat.isSymbolicLink(), size: stat.size, mtime: stat.mtime, }; } async exec( command: string, options?: { cwd?: string; env?: Record; timeoutMs?: number; signal?: AbortSignal; }, ): Promise<{ stdout: string; stderr: string; exitCode: number }> { const timeoutSignal = typeof options?.timeoutMs === 'number' ? AbortSignal.timeout(options.timeoutMs) : undefined; const callerSignal = options?.signal; const signal = callerSignal && timeoutSignal ? AbortSignal.any([callerSignal, timeoutSignal]) : (callerSignal ?? timeoutSignal); try { const response = await this.sandbox.runCommand({ cmd: 'bash', args: ['-c', command], cwd: options?.cwd, env: options?.env, signal, }); const [stdout, stderr] = await Promise.all([ response.stdout({ signal }), response.stderr({ signal }), ]); return { stdout, stderr, exitCode: response.exitCode }; } catch (err) { if (callerSignal?.aborted) throw err; const aborted = timeoutSignal?.aborted && (err === timeoutSignal.reason || (err instanceof Error && (err.name === 'AbortError' || err.name === 'TimeoutError'))); if (aborted) { return { stdout: '', stderr: `[flue:vercel] Command timed out after ${options?.timeoutMs} milliseconds.`, exitCode: 124, }; } throw err; } } } export function vercel(sandbox: VercelSandbox): SandboxFactory { return { async createSessionEnv(): Promise { const sandboxCwd = '/vercel/sandbox'; const api = new VercelSandboxApi(sandbox); return createSandboxSessionEnv(api, sandboxCwd); }, }; } ``` Pass an initialized Vercel `Sandbox` to `vercel(...)` and pass the returned factory to the agent’s `useSandbox(...)` call. The adapter maps the provider’s complete file stat, resolves relative paths from `/vercel/sandbox`, forwards a composed signal to command execution and output reads, propagates caller cancellation, and maps only `timeoutMs` cancellation to exit code 124. ## Configure | Variable | Purpose | | ------------------- | ------------------------------------------------------------------------------------------------------------------- | | VERCEL\_OIDC\_TOKEN | **Required for OIDC authentication** — Injected automatically on Vercel; set it explicitly when using OIDC locally. | | Requirement | Purpose | | ------------------------------- | ------------------------------------------------------------------------------------------------------------ | | Vercel-supported authentication | **Required** — Uses OIDC on Vercel or an access token or other supported authentication flow outside Vercel. | | @vercel/sandbox package | **Required** — Creates the Vercel Sandbox adapted by Flue. | | Application-owned lifecycle | **Required** — Creates the sandbox and decides its retention and cleanup. | ## Typical use ```ts import { Sandbox } from '@vercel/sandbox'; import { useModel, useSandbox } from '@flue/runtime'; import { vercel } from '../sandboxes/vercel'; export function Assistant() { useModel('anthropic/claude-sonnet-4-6'); useSandbox({ // Lazy, per the SandboxFactory contract: constructing this object is // cheap; the expensive Vercel sandbox creation happens once, inside // createSessionEnv(), at initialization — never on a re-render. async createSessionEnv(options) { const sandbox = await Sandbox.create({ runtime: 'node24' }); return vercel(sandbox).createSessionEnv(options); }, }); } ``` Keep Vercel authentication values in trusted application configuration and determine whether sandboxes should be fresh per job or reusable for stable agent identities. See [Sandboxes](https://nightly.flueframework.com/docs/guide/sandboxes/) and [Sandbox Adapter API](https://nightly.flueframework.com/docs/reference/sandbox-api/). ## Docs Navigation Current page: [Vercel Sandbox](https://nightly.flueframework.com/docs/ecosystem/sandboxes/vercel/) ### Sections * [Guide](https://nightly.flueframework.com/docs/guide/getting-started/) * [Reference](https://nightly.flueframework.com/docs/reference/agent-api/) * [CLI](https://nightly.flueframework.com/docs/cli/overview/) * [SDK](https://nightly.flueframework.com/docs/sdk/overview/) * [Ecosystem](https://nightly.flueframework.com/docs/ecosystem/) * [Overview](https://nightly.flueframework.com/docs/ecosystem/) ### Channels * [Discord](https://nightly.flueframework.com/docs/ecosystem/channels/discord/) * [Facebook](https://nightly.flueframework.com/docs/ecosystem/channels/messenger/) * [GitHub](https://nightly.flueframework.com/docs/ecosystem/channels/github/) * [Google Chat](https://nightly.flueframework.com/docs/ecosystem/channels/google-chat/) * [Intercom](https://nightly.flueframework.com/docs/ecosystem/channels/intercom/) * [Linear](https://nightly.flueframework.com/docs/ecosystem/channels/linear/) * [Microsoft Teams](https://nightly.flueframework.com/docs/ecosystem/channels/teams/) * [Notion](https://nightly.flueframework.com/docs/ecosystem/channels/notion/) * [Resend](https://nightly.flueframework.com/docs/ecosystem/channels/resend/) * [Salesforce](https://nightly.flueframework.com/docs/ecosystem/channels/salesforce-marketing-cloud/) * [Shopify](https://nightly.flueframework.com/docs/ecosystem/channels/shopify/) * [Slack](https://nightly.flueframework.com/docs/ecosystem/channels/slack/) * [Stripe](https://nightly.flueframework.com/docs/ecosystem/channels/stripe/) * [Telegram](https://nightly.flueframework.com/docs/ecosystem/channels/telegram/) * [Twilio](https://nightly.flueframework.com/docs/ecosystem/channels/twilio/) * [WhatsApp](https://nightly.flueframework.com/docs/ecosystem/channels/whatsapp/) * [Zendesk](https://nightly.flueframework.com/docs/ecosystem/channels/zendesk/) ### Sandboxes * [boxd](https://nightly.flueframework.com/docs/ecosystem/sandboxes/boxd/) * [Cloudflare Shell](https://nightly.flueframework.com/docs/ecosystem/sandboxes/cloudflare-shell/) * [Cloudflare Sandbox](https://nightly.flueframework.com/docs/ecosystem/sandboxes/cloudflare/) * [Daytona](https://nightly.flueframework.com/docs/ecosystem/sandboxes/daytona/) * [E2B](https://nightly.flueframework.com/docs/ecosystem/sandboxes/e2b/) * [exe.dev](https://nightly.flueframework.com/docs/ecosystem/sandboxes/exedev/) * [islo](https://nightly.flueframework.com/docs/ecosystem/sandboxes/islo/) * [Mirage](https://nightly.flueframework.com/docs/ecosystem/sandboxes/mirage/) * [Modal](https://nightly.flueframework.com/docs/ecosystem/sandboxes/modal/) * [Vercel Sandbox](https://nightly.flueframework.com/docs/ecosystem/sandboxes/vercel/) ### Deploy * [AWS](https://nightly.flueframework.com/docs/ecosystem/deploy/aws/) * [Cloudflare](https://nightly.flueframework.com/docs/ecosystem/deploy/cloudflare/) * [Docker](https://nightly.flueframework.com/docs/ecosystem/deploy/docker/) * [Fly.io](https://nightly.flueframework.com/docs/ecosystem/deploy/fly/) * [GitHub Actions](https://nightly.flueframework.com/docs/ecosystem/deploy/github-actions/) * [GitLab CI/CD](https://nightly.flueframework.com/docs/ecosystem/deploy/gitlab-ci/) * [Node.js](https://nightly.flueframework.com/docs/ecosystem/deploy/node/) * [Railway](https://nightly.flueframework.com/docs/ecosystem/deploy/railway/) * [Render](https://nightly.flueframework.com/docs/ecosystem/deploy/render/) * [SST](https://nightly.flueframework.com/docs/ecosystem/deploy/sst/) ### Databases * [libSQL](https://nightly.flueframework.com/docs/ecosystem/databases/libsql/) * [MongoDB](https://nightly.flueframework.com/docs/ecosystem/databases/mongodb/) * [MySQL](https://nightly.flueframework.com/docs/ecosystem/databases/mysql/) * [Postgres](https://nightly.flueframework.com/docs/ecosystem/databases/postgres/) * [Redis](https://nightly.flueframework.com/docs/ecosystem/databases/redis/) * [Supabase](https://nightly.flueframework.com/docs/ecosystem/databases/supabase/) * [Turso](https://nightly.flueframework.com/docs/ecosystem/databases/turso/) * [Valkey](https://nightly.flueframework.com/docs/ecosystem/databases/valkey/) ### Tooling * [Braintrust](https://nightly.flueframework.com/docs/ecosystem/tooling/braintrust/) * [OpenTelemetry](https://nightly.flueframework.com/docs/ecosystem/tooling/opentelemetry/) * [Sentry](https://nightly.flueframework.com/docs/ecosystem/tooling/sentry/) * [Vitest Evals](https://nightly.flueframework.com/docs/ecosystem/tooling/vitest-evals/)