Perplexity AI has officially open-sourced SPACE (Sandboxed Platform for Agentic Code Execution), a new infrastructure layer designed to provide isolated, secure environments for running agent-generated code. Built primarily in Rust, the platform leverages Firecracker microVMs to create lightweight Linux environments that can be managed via a standard HTTP API. This release addresses a critical pain point in agentic workflows: the need for robust, scalable isolation when LLMs execute arbitrary commands or scripts.

Architecture and Lifecycle Management

The core mechanism of SPACE revolves around templates and sandboxes. A template defines the starting environment, while a sandbox is an instance of that template with its own writable filesystem and virtual machine. Applications interact with SPACE by creating a sandbox from a template, waiting for readiness, and then establishing command sessions to execute processes. Lifecycle changes, such as pausing, suspending, or waking a sandbox, are asynchronous operations. The API returns an operation ID that clients must poll for completion, ensuring that state changes are handled robustly without blocking the application flow.

Integration and Compatibility

For developers already entrenched in the E2B ecosystem, SPACE includes an E2B Compatibility Wrapper (ECW). This allows users to configure the platform to work with the tested E2B Python SDK, smoothing the migration path for existing agentic applications. The platform supports both Kubernetes deployments for production scale and standalone execution without it. Command output is streamed via a separate data-plane connection using session-scoped attachment tokens, providing a secure and efficient way to collect results from executed processes.

Developer Experience and Tooling

The repository is structured for a modern Rust development workflow, utilizing tilt up for local development loops that rebuild affected images and roll workloads as files change. Documentation is generated automatically after changes merge, covering everything from architecture guides to operator CLI usage. The platform supports warm pools on Kubernetes, which keep booted sandboxes ready to skip cold boot times, significantly reducing latency for frequent agent interactions. Base snapshots also allow restoring sandboxes on single nodes, offering further optimization for resource management.

Key Takeaways

  • SPACE is licensed under Apache 2.0 and is implemented in Rust, exposing an HTTP API.
  • It uses Firecracker microVMs for strong isolation, superior to container-based solutions for untrusted code.
  • An E2B Compatibility Wrapper is included to facilitate adoption for users of the E2B SDK.
  • Lifecycle operations are asynchronous, requiring polling of operation IDs for status updates.
  • The platform supports Kubernetes for production and can run without it for simpler setups.

The Bottom Line

This is a serious move by Perplexity to own the infrastructure layer for agentic code execution. By standardizing on Firecracker and providing an E2B-compatible wrapper, they are lowering the barrier to entry for building secure, autonomous agents. If you are building agents that execute code, check out the SPACE repository. The focus on isolation and lifecycle management is exactly what the industry needs to move beyond fragile container hacks.