Skip to content

Document Code Interpreter sandbox details #662

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gukoff wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Document Code Interpreter sandbox details #662

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
028017e
Document the features of the sandbox environment for Code Interpreter…
gukoff Jan 21, 2026
84d5568
Use relative link
gukoff Jan 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions articles/ai-foundry/default/agents/how-to/tools/code-interpreter.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ ms.date: 12/16/2025
author: alvinashcraft
ms.author: aashcraft
ms.custom: azure-ai-agents, references_regions, dev-focus
ai-usage: ai-assisted
zone_pivot_groups: selection-code-interpreter-new
---

Expand Down Expand Up @@ -251,3 +252,17 @@ The code interpreter tool for the Foundry projects (new) API isn't available in
|`.xlsx`|`application/vnd.openxmlformats-officedocument.spreadsheetml.sheet`|
|`.xml`|`application/xml` or `text/xml`|
|`.zip`|`application/zip`|

## Sandboxed execution environment

Code Interpreter runs Python code in a Microsoft-managed sandbox. The sandbox is designed for running untrusted code and is implemented using [dynamic sessions (code interpreter sessions) in Azure Container Apps](/azure/container-apps/sessions-code-interpreter), where each session is isolated by a Hyper-V boundary.

Key behaviors to plan for:

- **Region**: The Code Interpreter sandbox runs in the same Azure region as your Foundry project.
- **Session lifetime**: A Code Interpreter session is active for up to 1 hour, with an idle timeout (see the Important note earlier in this article).
- **Isolation**: Each session runs in an isolated environment. If your agent invokes Code Interpreter concurrently in different conversations, separate sessions are created.
- **Network isolation and internet access**: The sandbox doesn't inherit your agent subnet configuration, and dynamic sessions are prevented from making outbound network requests.
Copy link

@dburik dburik Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would be good to properly document the expected behavior. For instance, what if I want the code interpreter to make requests to read/write files on my storage account - would this be possible? Or is any API call gets blocked? Can we control this?

- **Files in the sandbox**: Files you attach for analysis are available to the sandboxed Python runtime. Code Interpreter can also generate files (for example, charts) and return them as downloadable outputs.

If you need more control over the sandbox runtime or you need a different isolation model, see the [custom code interpreter](./custom-code-interpreter.md).