Container-fast, VM-secure
Each sandbox is its own hardened micro-VM (Kata/QEMU, own kernel) โ real isolation, not shared-kernel containers โ yet it boots in seconds. Hosted entirely in the EU on dedicated hardware.
own kernel ยท own network ยท own HTTPS urlCheap & ephemeral
Priced for short-lived work, not 24/7 servers. Set a TTL, use it, and it's automatically torn down โ you never pay for idle. Deliberately not built for persistent hosting.
pay for seconds ยท auto-cleanup on expiryBuilt for AI & previews
The right primitive for agent runners, AI workloads, AI clouds, preview environments and more โ run untrusted code and per-branch app previews safely, at scale.
agents ยท ai clouds ยท preview envsOne API. Two workloads.
Long-running preview services and run-to-exit agent jobs โ same endpoint, controllable isolation and internet egress per sandbox.
# Spawn an isolated environment โ live in seconds
curl -H "Authorization: Bearer $TOKEN" \
-X POST https://hive-api.hive.eai.onl/sandbox \
-d '{"image":"nginx","ttl":1800,"internet":"full"}'
# โ { "url": "https://ab12cd34.hive.eai.onl", "status": "running" }
How it works
POST an image
Any OCI image + optional env, TTL, CPU/RAM, restart mode and internet policy (none / whitelist / full).
Get a live URL
Hive boots a hardened micro-VM and hands back a dedicated HTTPS URL. Poll status until running.
It cleans itself up
At TTL the whole environment โ VM, route, network policies โ is destroyed. No leftovers, no idle spend.