Compare · Agent sandboxes · verified 17 Oct 2026
Rush vs Vercel Sandbox
Vercel Sandbox is a microVM you script. Rush is the request that comes back as a pull request.
Facts checked 17 October 2026. Prices and limits move. Read the citations.
Pick Vercel Sandbox when you are building on Vercel and want raw microVMs billed by active CPU. Pick Rush when an agent should do the task and return the pull request.
Proof
A real Rush run
Console capture of a coding Task that opened a pull request. Not a mockup.
Read this first
The useful distinction
Vercel Sandbox: an SDK, CLI and API for on-demand Firecracker microVMs that run untrusted or agent-generated code. You bring the agent and the workflow. Generally available since 30 January 2026.
A sandbox is a computer for an agent. You still write the agent loop, clone the repository, push the branch and decide when the work is done. Rush is the layer above: you send the task and get back the pull request, report or files.
Head to head
Buyer questions
| Question | Rush | Vercel Sandbox |
|---|---|---|
| What runs | Claude Code, Codex or OpenCode, the vendors' own CLIs, or a saved agent built on one. | None built in. The default image includes Node.js, Python and coding agents; you start and drive them. |
| Isolation | One E2B microVM per run with its own disk, memory, desktop and browser. It parks between turns and is removed on cancel or after 7 idle days. | Firecracker microVM with its own filesystem and network. Sandboxes save state on stop by default. Sessions run 45 minutes on Hobby and 24 hours on Pro; default timeout is 5 minutes. |
| Result and pull request | A run on a repository works on its own branch and opens the pull request; a run whose checks fail ends needs_review, not completed. Reports and files come back as artifacts. | Left to you. You get exec, files and logs; the pull request is your code. |
| MCP | Rush is an MCP server at api.prix.dev/mcp with 18 tools. A run also takes MCP servers by connection or inline. | Vercel's remote MCP server has tools to create sandboxes, run commands, read and write files and set network policy. |
| Team | Everyone in the org sees the same Projects and runs, with who started each. Automations start runs from GitHub events, schedules, webhooks and Linear. | Scoped to a Vercel team and project, with OIDC auth and a dashboard to manage sandboxes. |
| Starting price | Free 5 agent-hours / month; Pro $20; Team $200 | Hobby free with 5 Active CPU hours / month; Pro draws from the $20 / month credit |
| Where it taps out | Three harnesses. Repositories through the GitHub App only. No self-host or customer VPC. A key runs 4 at once by default, up to 100. | 5-minute default timeout. 24-hour session cap on Pro, 45 minutes on Hobby. A Pro sandbox tops out at 8 vCPU and 16 GB. Hobby creation pauses once quota is used. |
Decision
When each side wins
Rush wins when
- You want an agent to finish the task and return the pull request, not a sandbox to script.
- A run parks between turns with its memory, at no charge, and wakes on the next message.
- The run's transcript, artifacts and usage come back on one record.
Vercel Sandbox wins when
- You want Active CPU billing: time waiting on I/O and model calls is not charged.
- You need 19 regions, static egress IPs and VPC peering through Secure Compute.
- You want up to 10,000 concurrent sandboxes on Pro and custom OCI images.
Rush
Where Rush sits
Vercel Sandbox gives you the machine and leaves the agent loop to you. Rush is that loop as an API: the agent, the clone through the GitHub App, the branch, the pull request and the transcript.
Honest limits
Skip Rush if
- Rush runs three agents: Claude Code, Codex and OpenCode. It does not host an agent you wrote yourself.
- Repositories come through the Rush GitHub App. A GitLab or Bitbucket repository cannot be a run's repository yet.
- There is no self-hosted or customer-VPC deployment, and we do not publish a compliance report today.
- Compute is metered. Free includes 5 agent-hours a month and Pro 40, each with a weekly ceiling.
- You review the pull request. Rush does not merge for you.
FAQ
Questions people actually ask
Can I move from Vercel Sandbox to Rush?
Yes. The steps, from Vercel's own docs, are on the Migrate from Vercel Sandbox to Rush page. Code you already pushed stays where it is.
Does Rush need my own model account?
By default a run uses your own Claude or ChatGPT subscription or API key, and your provider bills the model calls. Rush meters the sandbox compute against your plan, and parked time is free.
Cluster
Keep reading
Citations
Sources
Every factual claim on this page traces to one of these URLs. Retrieval date is 17 October 2026 unless the source prints an earlier published date.
- [1] Rush, “Rush product requirements”, retrieved 2026-09-15. https://getrush.ai/cloud
- [2] Rush, “Rush pricing (live contract on getrush.ai)”, retrieved 2026-09-15. https://getrush.ai/pricing
- [3] Rush, “Isolation, plainly”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/isolation
- [4] Rush, “Results and proof”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/results-and-proof
- [5] Rush, “Usage and billing”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/usage-and-billing
- [6] Rush, “Rush MCP server”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/mcp-server
- [7] Rush, “Automations”, retrieved 2026-10-17. https://getrush.ai/docs/concepts/automations
- [8] Vercel, “Vercel Sandbox”, retrieved 2026-10-17. https://vercel.com/docs/sandbox
- [9] Vercel, “Vercel Sandbox pricing and quotas”, retrieved 2026-10-17. https://vercel.com/docs/sandbox/pricing
- [10] Vercel, “Run untrusted code with Vercel Sandbox, now generally available”, published 2026-01-30. https://vercel.com/blog/vercel-sandbox-is-now-generally-available
- [11] Vercel, “Vercel Sandbox vs E2B”, published 2026-03-20. https://vercel.com/kb/guide/vercel-sandbox-vs-e2b
- [12] Vercel, “Sandboxes (Vercel MCP tools)”, retrieved 2026-10-17. https://vercel.com/docs/agent-resources/vercel-mcp/tools/sandboxes
Next
Run the next Task on Rush
Connect a repository. Pick Claude Code, Codex, or OpenCode. Review the PR.