Features

• Sandbox

  SpaceXAI

  Limits what an approved tool call can read, write, and reach on the network (Landlock on Linux, Seatbelt on macOS). Off by default. Profiles: off, workspace, devbox, read-only, strict. Enable with grok --sandbox, [sandbox] profile, or GROK_SANDBOX.

  Grok Buildcliinfra

• Builds

  Cursor

  Ready-to-use copies of the dev environment. Agents boot ~3× faster to first token; included with Cloud Agents.

  Cursor Cloud Agentsagentsinfra

• Self-hosted machines

  Cursor

  Run cloud agents on machines in your network. My Machines connects a laptop or VM; team pools scale workers on demand with hibernate and restore. Integrates with AWS Lambda, Coder, Cloudflare, Daytona, Modal, Namespace, Vercel, and E2B. Self-hosted workers support computer use on Linux and Mac.

  Cursor Cloud Agentsagentsinfracomputer-use

• Rollouts

  Cursor

  Change monitor on every pull request: writes a monitoring plan, tracks deploys per environment, and reports verified healthy, regression detected, or inconclusive. Connects Origin or GitHub, CD deploy events, and telemetry (Datadog and others).

  Cursor Cloud Agentsautomationagentsinfra

4 of 89