@useatlas/vercel-sandbox

Firecracker microVM isolation via @vercel/sandbox with deny-all network policy.

Install

bun add @useatlas/vercel-sandbox @vercel/sandbox

Usage

import { defineConfig } from "@atlas/api/lib/config";
import { vercelSandboxPlugin } from "@useatlas/vercel-sandbox";

// On Vercel (auto-detected OIDC):
export default defineConfig({
  plugins: [vercelSandboxPlugin({})],
});

// Off Vercel (access token):
export default defineConfig({
  plugins: [vercelSandboxPlugin({ accessToken: "...", teamId: "team_..." })],
});

Config

| Field | Type | Default | Description | |-------|------|---------|-------------| | accessToken | string? | — | Access token for non-Vercel environments | | teamId | string? | — | Required when using access token |

Reference

• Plugin SDK docs
• Authoring guide