Some providers ship the machine with coding agents already installed and a way to prompt them. Others ship a computer and expect you to bring the agent.
A preinstalled agent is not a hosted agent. Preinstalled means the binary is on the disk and a login may be configured; the agent loop still runs inside your sandbox and you still pay the model provider, or sign in with your own subscription. Hosted means the provider runs the loop and bills you for it.
The useful distinction is threefold: is an agent installed, can you prompt it through the provider's API rather than a terminal, and does the provider manage the model credentials? Very few do all three.
Preinstalled agents also change the setup story. A machine with Claude Code and Codex already on it is a working environment for a non-engineer who can type a request, even if nothing else is click-driven.
Where providers split
The claim on the left, the provider's own words on the right
Installed and promptable
Boat installs seven harnesses and exposes a prompt endpoint with steering, interrupts and multiple conversations. Sandboxer installs six and has a prompt API with an event stream. Agent 37 has six agent templates plus a separate managed-hosting product where the agent is the product.
Lizard installs five and prompts them from the CLI only; the SDK has no prompt method. boxd installs three and relies on the in-VM CLI.
Installed, not managed
InstaBox and Vercel put coding agents in their default images but publish no agent-run API: you open a terminal and use them. E2B documents how to run Claude Code, Codex and Amp, but does not claim to preinstall them.
That is enough for a technical user and not enough for a product that wants to start an agent on demand.
Bring your own
Runtime does not preinstall agents, and its own docs say no bridge harness has run on it yet. Sprites offers plugins and SDK integrations rather than a hosted agent. Morph exposes a tmux API so an agent can be driven programmatically, but the agent is yours.
At these providers the sandbox is the product and the agent is an application you install.
What to watch for
The details that decide the answer in practice
01
Whether the agent is preinstalled, promptable through an API, or both.
02
Who pays for the model: the provider, your API key, or your subscription login.
03
Whether the provider manages model credentials or expects them in the environment.
04
Whether the agent runs as a hosted service or inside your sandbox.
05
Whether a non-engineer can start it without a terminal.
Compare all twelve
Docs read 28 October 2026
Some providers ship the machine with coding agents already installed and a way to prompt them. Others ship a computer and expect you to bring the agent.
Six agent templates (Hermes, OpenClaw, Claude Code, Codex, Grok, OpenCode) plus Pi and n8n, and a separate managed-hosting product where the agent is the product. Claude Code and Codex use your own account.
“Run OpenClaw, Hermes, Claude Code, Codex, OpenCode, or Grok around the clock. Yours is live in one click.”
Every sandbox exposes an MCP server that agents use to operate it, and agent hosting is a separate product line, but Agent Runtime is labelled coming soon.
“Every Blaxel sandbox exposes a built-in MCP server so agents can operate the sandbox using tool calls for files, processes, ports, and previews.”
Claude Code, Codex and OpenCode are preinstalled, and an in-VM boxd CLI is pre-authenticated so an agent can create sibling machines. Claude logins are account-level and injected at boot.
“Every boxd machine ships with three coding agents”
Five agent templates plus a base image and desktop variants. Agents are prompted from the CLI with streaming and interrupts; the SDK has no prompt method.
No preinstalled coding agents: the default image ships Python, Node, Bun, git, compilers and sudo, and agents are installed by you. The vendor says no bridge harness has run on Runtime yet.
“No bridge harness (Claude Code, Codex) has run on Runtime yet.”