Security and isolation
Run agent code in an isolated WebAssembly sandbox. Control which operations it can perform, on which resources, and with which arguments—with semantic permissions enforced on every call.
Explore security and isolationYour agent writes the code.
You write the rules.
An in-process runtime for agent-written code, with isolation and granular permissions.
Run agent code in an isolated WebAssembly sandbox. Control which operations it can perform, on which resources, and with which arguments—with semantic permissions enforced on every call.
Explore security and isolationMake each agent’s authority explicit and reviewable. Apply defined policies consistently, with access scoped to the current session.
Define authority with BlueprintsLet agents run a complete tool workflow as code. Send the model the result it needs instead of every intermediate response.
See how code reduces token useHelp agents complete tasks with typed APIs and actionable errors. Run multi-step workflows without a model round trip for every action.
Learn about typed execution