Sandbox
Modal
Isolated VM Sandboxes with a Linux kernel for agent code and Docker workloads.
Own model keyPlan dependent
Published plans1
Last checked2026-10-23
Source statusSources reviewed
The essentials
What Modal offers
Modal is listed here as sandbox infrastructure for AI agent workloads. Isolated VM Sandboxes with a Linux kernel for agent code and Docker workloads.
Pricing and deployment
Sandbox compute billed by the second using resource request/actual-usage rules. GPU execution is a different configuration; VM runtime is CPU-only.
Choosing this service
Evaluate the execution model, persistence requirements and connected services before choosing a deployment. A platform base fee or compute rate is not a complete model-usage budget.
Specifications below distinguish documented features from information not disclosed in the reviewed sources. Official links and the review date are provided for checking current terms.
Subscription & usage
Choose a plan. Check the scope.
These plans can serve different access methods. Model usage and resource charges may be additional.
CPU Sandbox — non-preemptible metering
SubscriptionUsage-based
CPU $0.00003942/physical-core-second + RAM $0.00000667/GiB-second; other services extra.
Included
Isolated VM Sandboxes with a Linux kernel for agent code and Docker workloads.
Extra usage
Non-preemptible CPU $0.00003942/physical-core-second; RAM $0.00000667/GiB-second. Model APIs and other services are additional.
Full conditions & limits
Pricing
- Pricing model
- Published
- Base subscription amount (not total cost)
- 0
- Currency
- USD
- Billing interval
- Usage only
- Subscription scope
- CPU $0.00003942/physical-core-second + RAM $0.00000667/GiB-second; other services extra.
- Annual commitment / upfront payment
- Sandbox compute billed by the second using resource request/actual-usage rules. GPU execution is a different configuration; VM runtime is CPU-only.
- Setup fee
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Included usage
- Isolated VM Sandboxes with a Linux kernel for agent code and Docker workloads.
- Overage rates
- Non-preemptible CPU $0.00003942/physical-core-second; RAM $0.00000667/GiB-second. Model APIs and other services are additional.
- Model costs and BYOK conditions
- Model API usage and third-party tools are additional unless explicitly included by the selected offer.
- Free trial / credits / expiry
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Cancellation and refunds
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Tax treatment
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
Resources and limits
- CPU allocation and billing basis
- Physical cores; 1 physical core = 2 vCPUs
- RAM
- Requested/used GiB; VM memory provisioned statically
- GPU / VRAM
- VM runtime: no GPU support; use a separate supported gVisor GPU configuration.
- Storage and persistence
- VM root filesystem limited to 512 GiB; snapshots/volumes have separate conditions
- Network egress
- Network and optional services follow platform pricing
- Agent limit
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Concurrency
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Execution quota
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Maximum session / execution duration
- Default Sandbox lifetime 5 minutes; configurable timeout up to 24 hours.
- Request rate limit
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Continuous execution / idle behavior
- Can terminate after a configured idle timeout; preserve state with snapshots before starting a replacement Sandbox.
- Retention
- A stopped Sandbox cannot execute more commands; retained snapshots/volumes have separate storage lifecycle and charges.
Plan controls
- Support
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Contractual SLA / availability target
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Plan-specific security and compliance
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Eligibility and restrictions
- CPU VM runtime; recreate from snapshot for execution exceeding the 24-hour timeout.
Evidence
- Official pricing source
- Official source
- Last checked (UTC date)
- 2026-10-23
- Source interpretation and caveats
- Representative plan only, not the complete provider catalog. Prices are a dated reference; check official checkout for current regional terms.
1 fields not disclosed
Price effective date, if explicitly published
Under the hood
Explore the specifications
Open a category for the details. Capabilities may depend on the selected plan.
Company & deploymentService model, use cases and limitations
Company and service
- Official website
- Official source
- Pricing page
- Official source
- Documentation
- Official source
- Hosting category
- Sandbox
- Deployment model
- Managed platform; customer deploys and configures the agent workload.
- Best suited to
- Isolated VM Sandboxes with a Linux kernel for agent code and Docker workloads.
- Important limitations
- Sandbox compute billed by the second using resource request/actual-usage rules. GPU execution is a different configuration; VM runtime is CPU-only.
Compatibility & toolsModels, memory, MCP and integrations
Compatibility and tools
- Frameworks / SDKs
- Modal Sandbox SDK and Linux-compatible agent tooling.
- Languages / runtimes
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Model compatibility
- Model availability and credentials depend on the selected framework and model provider.
- Bring your own model API key
- Conditional / plan dependent
- Memory and sessions
- Filesystem state and configured volumes/snapshots; conversation memory belongs to your application.
- MCP: client / server / hosting distinction
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Schedules and triggers
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Browser execution
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Code execution / sandbox
- Sandbox command execution; VM runtime supports Docker.
- App integrations / authentication
- Configure supported tools and provider credentials; third-party services can add charges.
Infrastructure & operationsRegions, scaling, networking and recovery
Infrastructure and operations
- Available deployment regions
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Scaling and idle behavior
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Git / deployment workflow
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Private network / static IP / egress controls
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Backups and recovery
- Filesystem Snapshots can preserve Sandbox state for restoration; configure lifecycle and storage explicitly.
- Logs, tracing, metrics and evaluations
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
Security & supportIsolation, access controls and support
Security and support
- Isolation model
- VM runtime has a separate Linux kernel; gVisor is another supported runtime.
- Secrets management
- Modal secrets and configured environment variables.
- SSO / roles / audit logging
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Compliance evidence and scope
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
- Support channels
- Not disclosed in the reviewed official sources; confirm with the provider before purchase.
Evidence, not assumptions
Sources & verification
Reviewed 2026-10-23 UTC. “Not disclosed” means a value was not confirmed in these sources, not that a capability is unavailable.