VOOZH about

URL: https://thenewstack.io/openai-agents-sdk-sandboxes/

⇱ OpenAI's Agents SDK separates the harness from the compute - The New Stack


TNS
SUBSCRIBE
Join our community of software engineering leaders and aspirational developers. Always stay in-the-know by getting the most important news and exclusive content delivered fresh to your inbox to learn more about at-scale software development.
REQUIRED
It seems that you've previously unsubscribed from our newsletter in the past. Click the button below to open the re-subscribe form in a new tab. When you're done, simply close that tab and continue with this form to complete your subscription.
The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our Terms of Use and Privacy Policy.
Welcome and thank you for joining The New Stack community!
Please answer a few simple questions to help us deliver the news and resources you are interested in.
REQUIRED
REQUIRED
REQUIRED
REQUIRED
REQUIRED
Great to meet you!
Tell us a bit about your job so we can cover the topics you find most relevant.
REQUIRED
REQUIRED
REQUIRED
REQUIRED
REQUIRED
Welcome!

We’re so glad you’re here. You can expect all the best TNS content to arrive Monday through Friday to keep you on top of the news and at the top of your game.

What’s next?

Check your inbox for a confirmation email where you can adjust your preferences and even join additional groups.

Follow TNS on your favorite social media networks.

Become a TNS follower on LinkedIn.

Check out the latest featured and trending stories while you wait for your first TNS newsletter.

PREV
1 of 2
NEXT
VOXPOP
As a JavaScript developer, what non-React tools do you use most often?
Angular
0%
Astro
0%
Svelte
0%
Vue.js
0%
Other
0%
I only use React
0%
I don't use JavaScript
0%
Thanks for your opinion! Subscribe below to get the final results, published exclusively in our TNS Update newsletter:
NEW! Try Stackie AI
From clobbered drafts to real-time sync
Apr 14th 2026 10:00am, by David Moore
TypeScript 6.0 RC arrives as a bridge to a faster future
Mar 14th 2026 9:00am, by Darryl K. Taft
Mastra empowers web devs to build AI agents in TypeScript
Jan 28th 2026 11:00am, by Loraine Lawson
2026-04-15 14:48:52
OpenAI's Agents SDK separates the harness from the compute
AI / AI Agents / AI Engineering / AI Infrastructure

OpenAI’s Agents SDK separates the harness from the compute

OpenAI's Agents SDK adds sandboxed workspaces, durable execution, and cloud storage support as it evolves from a chatbot tool into a production-ready agent platform.
Apr 15th, 2026 2:48pm by Frederic Lardinois
👁 Featued image for: OpenAI’s Agents SDK separates the harness from the compute
OpenAI Dev Day 2025. Credit: The New Stack.

OpenAI announced a major update to its Agents SDK on Wednesday, one that takes the model-agnostic SDK from being a relatively bare-bones, unopinionated way to build agents and turns it into a fully-fledged toolbox for moving agents into production.

When the original SDK launched just over a year ago, OpenAI made a bet that models would get better at having a trajectory, planning, and staying on task for a reasonable amount of time.

As OpenAI’s Steve Coffey, who is the tech lead for the company’s Responses API, tells The New Stack, the original SDK was essentially built for chatbot use cases.

“Now we have models that can kind of work for hours at a time or days or weeks.”

“The models that were out at the time, you could expect them to take five, six, seven steps maybe in a workflow, but not really go beyond that. And now we have models that can kind of work for hours at a time or days or weeks,” he says.

Over the past year, OpenAI added a number of features to the SDK, including support for MCP, Temporal’s tools for durable execution, and other third-party tools and services. But as Coffey notes, it remained a pre-1.0 product — and that’s still the case today (“We plan to evolve it a bit further,” Coffey says.)

Sanboxes for agents

The marquee feature of this launch is that developers can now give their agents controlled workspaces in which to operate. The core idea here is to separate the agent harness from the compute to ensure security and durability, while also enabling these systems to scale when needed.

The marquee feature of this launch is that developers can now give their agents controlled workspaces in which to operate.

Those sandboxes can be virtually any kind of container or virtual machine. Developers can bring their own container infrastructure or use tools from Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel to create a sandbox for their agents. Agents can use a single sandbox or start up additional ones when needed — or start up sub-agents that run in their own sandboxed environments, too.

Because of this, the SDK could run as a Temporal job, Coffey explains, and the agent would then run in a Model sandbox or Docker container. “And then these things are very separated from each other. So tool calls run in an unprivileged environment, and all the code that Modal writes runs in a privileged environment,” he notes.

Separating the harness from compute

As Coffey notes, the team wanted to ensure that businesses could use their existing infrastructure to run these workspaces.

There is a security aspect to this as well, especially for large enterprises. As Coffey notes, an individual developer working on a one-off task may not worry too much about security, but “on the other end of the spectrum are these big enterprise deployments, where you care a ton about the agent running in a totally de-approved environment.

“So no API keys, no secrets in that sandbox. You want it to be totally isolated — probably isolated from the network in a lot of cases and not able to do any sort of egress.”

👁 Image
Credit: OpenAI.

Inside this sandbox, the sandbox agent, which is now quite a bit more opinionated than its predecessors, can use the shell and the file system to work with text files, images, or PDFs, for example. Developers, of course, can also define which other tools the agent can work with.

Those agents need access to data, too. Developers can mount local files, AWS S3 buckets, Google Cloud Storage, Azure Blob Storage, and Cloudflare R2. This also allows the sandbox to be somewhat stateful.

“If you want to be able to snapshot a container and spin down that container and then spin it back up later with the same file system, we’re adding support for that,” Coffey says.

Even without using the sandboxes, agents built on the Agent SDK now have configurable memory and support for files and documents, though it seems OpenAI expects most production systems to use sandboxed environments.

Like before, there is no additional pricing for the Agents SDK. Users pay for the tokens and tool use they consume through the API, based on OpenAI’s standard pricing.

TRENDING STORIES
Before joining The New Stack as its senior editor for AI, Frederic was the enterprise editor at TechCrunch, where he covered everything from the rise of the cloud and the earliest days of Kubernetes to the advent of quantum computing....
Read more from Frederic Lardinois
SHARE THIS STORY
TRENDING STORIES
TNS owner Insight Partners is an investor in: Docker, OpenAI, E2B.
SHARE THIS STORY
TRENDING STORIES
TNS DAILY NEWSLETTER Receive a free roundup of the most recent TNS articles in your inbox each day.
The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our Terms of Use and Privacy Policy.