E2B Deploy Agents Integration

E2B is an open-source cloud sandbox platform that gives AI agents secure, isolated environments to run code, use tools, and execute tasks at scale.

Start for free

E2B Deploy Agents

Benefits with Ory + E2B Deploy Agents Integration

Ory integrates with E2B to give teams a verified protection boundary for AI agents in production. Teams run customer-owned agents in short-lived E2B Sandboxes created from an immutable template build, so each run starts from a known state with the Ory Agent Security runtime package already in place. Every gated tool call is checked against fine-grained authorization to permit or deny the action, and all activity is logged for a complete audit trail. Teams can start in Observe mode to see how agents use their tools, then switch to Enforce mode so agents act only within their authorized permissions.

The fastest way to get started with Ory Agent Security is to sign up for the Ory Network. Install the ory-agent CLI, then create an Agent Security deployment for E2B from the Ory Console or with the CLI from your agent's project directory.

brew install ory/tap/ory-agent

View E2B docs

Use Cases

— 03 use cases

Agent IAM

Secures agents running on E2B with a runtime identity, fine-grained authorization on every gated tool call, and complete audit logging.

Explore Agent IAM

CIAM

Lets teams ship customer-facing agents on E2B that act on behalf of end users with Ory-managed authentication and consent, following Ory best practices.

Explore CIAM

B2B IAM

Applies fine-grained authorization to every action agents take for business customers on E2B, with a fresh sandbox per task or tenant, and scales with business growth.

Explore B2B IAM

Core Functionality

— 06 capabilities

Identity
Gives each sandboxed agent an Agent Security runtime identity so it is verified before it acts.
Authorization
Enforces fine-grained, policy-based access control for every gated tool call an agent makes on E2B.
Secrets
Supplies Agent Security runtime values to the sandbox at creation instead of baking them into the template.
Isolation
Runs each agent in a short-lived E2B Sandbox built from an immutable template, limiting persistence and drift between runs.
Audit
Logs complete audit trails for agent sessions, tool invocations, and authorization decisions.
Rollout
Creates the deployment with Ory Deploy or the ory-agent CLI, ships the runtime package, and verifies the protection boundary, with Observe mode for monitoring and Enforce mode for strict permission enforcement.