Perplexity open-sources SPACE agent sandbox under Apache 2.0

Perplexity has made SPACE publicly available on GitHub under the Apache License 2.0. Outside developers can now inspect the source code and documentation for its agent-code sandbox platform.

The API reference covers 14 HTTP operations for creating and inspecting Linux sandboxes, running commands, checking processes, controlling lifecycle state and streaming events. Applications can call the service over HTTP rather than embed a Rust library. Management requests return operation identifiers for clients to poll, while command output travels over a separate data-plane connection using a session-scoped attachment token.

Perplexity’s architecture documentation describes each sandbox as an isolated Firecracker microVM — a lightweight virtual machine — with its own writable filesystem. Publishing the repository makes that design inspectable, but the documentation does not independently show that deployments prevent sandbox escapes, cross-tenant access or credential exposure.

The documented lifecycle covers pause, suspend, wake and delete. Pausing leaves a virtual machine’s memory resident. Suspending it saves the virtual-machine and filesystem state while releasing active VM resources; waking the sandbox either resumes or restores it.

The installation guide lays out a local Kubernetes deployment using Kind, with Linux x86-64, KVM, Docker and host networking devices among the prerequisites. The repository also includes an AWS reference deployment for Amazon EKS, examples, protocol definitions, service code, templates and smoke tests. The guide warns that the local deployment uses development passwords and signing keys, should be kept private and should not use production credentials.