(https://github.githubassets.com) (https://avatars.githubusercontent.com) (https://github-cloud.s3.amazonaws.com) (https://user-images.githubusercontent.com/) (https://github.githubassets.com) (https://avatars.githubusercontent.com)   (https://github.githubassets.com/assets/react-e27d1b3e03961e68.js)  (https://github.githubassets.com/assets/react-compiler-runtime-4610bd6d3de9c049.js)  (https://github.githubassets.com/assets/scheduler-58b860b049ca307c.js)  (https://github.githubassets.com/assets/react-dom-e5fd46a22d5c4058.js)  (https://github.githubassets.com/assets/react-dom-client-1b4a3ee065998cea.js)  (https://github.githubassets.com/assets/react-is-e0b593954b4706d8.js)  (https://github.githubassets.com/assets/react-jsx-runtime-4915cb0f5b3aff04.js)  (https://github.githubassets.com/assets/react-reconciler-8e99e505c4429605.js)  (../../github.githubassets.com/assets/light-5c4e9fc574bf49f3.css)  (../../github.githubassets.com/assets/light_high_contrast-fb37c309e0603a69.css)  (../../github.githubassets.com/assets/dark-afff6c53aef9b9d1.css)  (../../github.githubassets.com/assets/dark_high_contrast-c409873d7987dffa.css)                (../../github.githubassets.com/assets/primer-primitives-97df7784617ce1ea.css)  (../../github.githubassets.com/assets/primer-9be9fe6313f476af.css)  (../../github.githubassets.com/assets/global-62747e27e61258dc.css)  (../../github.githubassets.com/assets/github-7a418ea859d1654d.css)  (../../github.githubassets.com/assets/repository-72bd7d974b5ac1cc.css)  (../../github.githubassets.com/assets/code-4c5c0895f723f870.css)  (https://github.githubassets.com/assets/wp-runtime-d9341e195bcec310.js)  (https://github.githubassets.com/assets/app-foundation-e30e053a2ec05810.js)  (https://github.githubassets.com/assets/app-runtime-43a736cfb17bfc3b.js)  (https://github.githubassets.com/assets/fetch-utilities-63626b86ca960a13.js)  (https://github.githubassets.com/assets/ser-a0f837900b980022.js)  (https://github.githubassets.com/assets/tp-daaf4baff8a79901.js)  (../../github.githubassets.com/assets/app-runtime.7ee70a9cd769c13f.module.css)  (https://github.githubassets.com/assets/catalyst-42724bfdecdcf111.js)  (https://github.githubassets.com/assets/selector-observer-e8810f64c443fb9b.js)  (https://github.githubassets.com/assets/relative-time-element-0417f617ad744a0d.js)  (https://github.githubassets.com/assets/by-9da36843ba9d191d.js)  (https://github.githubassets.com/assets/ja9-9a1160b939f2cd52.js)  (https://github.githubassets.com/assets/3h-55903cf2303047ad.js)  (https://github.githubassets.com/assets/hk-f1498fec45311acd.js)  (https://github.githubassets.com/assets/jz5-7aa1ff0a0e750f41.js)  (https://github.githubassets.com/assets/hj-1d800d09e9a8720a.js)  (https://github.githubassets.com/assets/j0-ccaf30a6d91f2f83.js)  (https://github.githubassets.com/assets/runtime-helpers-5e0b3ae3c4036207.js)  (https://github.githubassets.com/assets/aria-live-827ce46b7ade1744.js)  (https://github.githubassets.com/assets/hotkey-9080b92ee55ecdce.js)  (https://github.githubassets.com/assets/react-core-181fffe35f64a86b.js)  (https://github.githubassets.com/assets/a9-c3ca0fbca57ec92e.js)  (https://github.githubassets.com/assets/urv-054283cae3e84e4a.js)  (https://github.githubassets.com/assets/4t-b7957415f663bc13.js)  (https://github.githubassets.com/assets/pb-1b8646f441999bcd.js)  (https://github.githubassets.com/assets/6n-afcf86ccabc4cad2.js)  (https://github.githubassets.com/assets/zj-1e9837c8e3c294ac.js)  (https://github.githubassets.com/assets/ix-db979d3ffe7f4c37.js)  (https://github.githubassets.com/assets/tw-dd6dc4caea8bef08.js)  (https://github.githubassets.com/assets/qyq-3e7962e375ef7004.js)  (https://github.githubassets.com/assets/bcs-f35fbf8e2ea6dbe7.js)  (https://github.githubassets.com/assets/7l-560ecaad1259d656.js)  (https://github.githubassets.com/assets/jl-e8dc4e5499c418bf.js)  (https://github.githubassets.com/assets/85-45c9403416d395d4.js)  (../../github.githubassets.com/assets/react-core.be84e87b659d3b98.module.css)  (https://github.githubassets.com/assets/n9c-72ef80408321eae1.js)  (https://github.githubassets.com/assets/li-990640017e9ade9f.js)  (https://github.githubassets.com/assets/primer-react-b8b1f4173243006b.js)  (https://github.githubassets.com/assets/nc-602186f274c7f83c.js)  (https://github.githubassets.com/assets/qmp-16b258ea4c9e9207.js)  (https://github.githubassets.com/assets/j6-e2974066e87682ac.js)  (https://github.githubassets.com/assets/t7l-07b4d1555e9567f3.js)  (https://github.githubassets.com/assets/4u-1fa5e65b146a8e59.js)  (https://github.githubassets.com/assets/s0-ef17fe8bd07a3b4d.js)  (https://github.githubassets.com/assets/y5-1b30b762023d3e89.js)  (https://github.githubassets.com/assets/n4u-f85b84521e1734c3.js)  (https://github.githubassets.com/assets/j8s-48e0fe20eefd980e.js)  (https://github.githubassets.com/assets/la-27679061f16e1495.js)  (https://github.githubassets.com/assets/iu-58ac501be176845a.js)  (https://github.githubassets.com/assets/gru-90582bf85fdae29b.js)  (https://github.githubassets.com/assets/a0-62a325e8a801c241.js)  (https://github.githubassets.com/assets/vy-77fa71d04f920b10.js)  (https://github.githubassets.com/assets/gb-6acc3941ce05eb8d.js)  (https://github.githubassets.com/assets/f7-0866cc20e1a6e4a3.js)  (https://github.githubassets.com/assets/csq-a4622df32bd3f47f.js)  (https://github.githubassets.com/assets/ssg-cf5ac52afa782913.js)  (https://github.githubassets.com/assets/lk-079e9de06c3be0af.js)  (https://github.githubassets.com/assets/x00-344c6e66a12fe4b8.js)  (https://github.githubassets.com/assets/wsu-447e9f95188c7974.js)  (https://github.githubassets.com/assets/038-7e759dd92b23180b.js)  (https://github.githubassets.com/assets/qmq-b7fd747ac0dec1dc.js)  (https://github.githubassets.com/assets/hwq-eba66f3e802ed05e.js)  (https://github.githubassets.com/assets/lcf-c3749f061b720d7a.js)  (https://github.githubassets.com/assets/meu-720cfd8779ef970d.js)  (https://github.githubassets.com/assets/tg-0262af28cee91950.js)  (https://github.githubassets.com/assets/is-72fb9279eae70f4e.js)  (https://github.githubassets.com/assets/dc-9a4f5284b4d6b55b.js)  (https://github.githubassets.com/assets/w9-183da1d030133670.js)  (https://github.githubassets.com/assets/r09-6a8e9e38bd26e4b8.js)  (https://github.githubassets.com/assets/642-0c34f01503252c51.js)  (https://github.githubassets.com/assets/45z-500ac78bc30b1f49.js)  (https://github.githubassets.com/assets/61-99828705784c9574.js)  (https://github.githubassets.com/assets/ioz-e202cd57dfb0dbae.js)  (https://github.githubassets.com/assets/kwg-1568470998026677.js)  (https://github.githubassets.com/assets/1mc-0231984e8f3f4958.js)  (https://github.githubassets.com/assets/pc-986abafaf53b769e.js)  (https://github.githubassets.com/assets/1e-f3794268c20cd18d.js)  (https://github.githubassets.com/assets/uu-6b8bc874d43973a0.js)  (https://github.githubassets.com/assets/2sj-a0b3d11863f57a1e.js)  (https://github.githubassets.com/assets/oj-79a85dac88e9d3f4.js)  (https://github.githubassets.com/assets/ys-eeb95a3084a8716b.js)  (../../github.githubassets.com/assets/primer-react-css.e4334163c54cccf5.module.css)  (../../github.githubassets.com/assets/45z.922f816fb2d6b268.module.css)  (../../github.githubassets.com/assets/oj.ecb4903dbaae6412.module.css)  (../../github.githubassets.com/assets/code-view.eb9a2f2a033c6ffd.module.css)  GitHub - microsoft/mxc: Policy-driven, layered isolation and containment · GitHub      (repo_source) (https://github.githubassets.com/)   (https://github.com/opensearch.xml) (GitHub) (https://github.com/fluidicon.png) (GitHub)                        (https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg) (https://github.githubassets.com/favicons/favicon.png) (../../github.githubassets.com/favicons/favicon.svg)  (../manifest.json)   (mxc.html#start-of-content) Skip to content   (https://github.githubassets.com/assets/no-1cf75929f17e3028.js)  (https://github.githubassets.com/assets/keyboard-shortcuts-dialog-3ccb6dec8639ef3e.js)  (../../github.githubassets.com/assets/primer-react-css.e4334163c54cccf5.module.css)  (../../github.githubassets.com/assets/keyboard-shortcuts-dialog.b7674213eb62f489.module.css)    (https://github.githubassets.com/assets/app-install-banner-partial-3a65ea248a6c8f3f.js)  (../../github.githubassets.com/assets/primer-react-css.e4334163c54cccf5.module.css)  (../../github.githubassets.com/assets/app-install-banner-partial.566d73e5e22ba1de.module.css)    (https://github.githubassets.com/assets/2lp-a40e70e520dbe650.js)  (https://github.githubassets.com/assets/rwd-7b2c7e3d5830b9e9.js)  (https://github.githubassets.com/assets/fz5-26e9f173be523540.js)  (https://github.githubassets.com/assets/jag-e8b94ef4bf214893.js)  (https://github.githubassets.com/assets/l19-ab9291460ccba23f.js)  (https://github.githubassets.com/assets/5nx-54af91826ad57196.js)  (https://github.githubassets.com/assets/zn-f168d65b85b3e44a.js)  (https://github.githubassets.com/assets/marketing-header-d5088a04768fe17c.js)  (../../github.githubassets.com/assets/primer-react-css.e4334163c54cccf5.module.css)  (../../github.githubassets.com/assets/primer-react-brand-css.05b219cdb8e80c43.module.css)  (../../github.githubassets.com/assets/zn.9fc2e923e926de87.module.css)  Navigation Menu       (https://github.com/)    (https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fmxc) Sign in         Appearance settings   Platform   AI CODE CREATION (https://github.com/features/copilot)    GitHub Copilot Write better code with AI    (https://github.com/features/ai/github-app)   GitHub Copilot app Direct agents from issue to merge    (https://github.com/mcp)    MCP Registry Integrate external tools       DEVELOPER WORKFLOWS (https://github.com/features/actions)   Actions Automate any workflow    (https://github.com/features/codespaces)    Codespaces Instant dev environments    (https://github.com/features/issues)    Issues Plan and track work    (https://github.com/features/code-review)   Code Review Manage code changes    (https://github.com/features/code-quality)    Code Quality Enforce quality at merge       APPLICATION SECURITY (https://github.com/security/advanced-security)   GitHub Advanced Security Find and fix vulnerabilities    (https://github.com/security/advanced-security/code-security)   Code security Secure your code as you build    (https://github.com/security/advanced-security/secret-protection)   Secret protection Stop leaks before they start       EXPLORE (https://github.com/why-github) Why GitHub   (https://docs.github.com) Documentation     (https://github.blog) Blog     (https://github.blog/changelog) Changelog     (https://github.com/marketplace) Marketplace       (https://github.com/features) View all features         Solutions   BY COMPANY SIZE (https://github.com/enterprise) Enterprises   (https://github.com/team) Small and medium teams   (https://github.com/enterprise/startups) Startups   (https://github.com/solutions/industry/nonprofits) Nonprofits      BY USE CASE (https://github.com/solutions/use-case/app-modernization) App Modernization   (https://github.com/solutions/use-case/devsecops) DevSecOps   (https://github.com/solutions/use-case/devops) DevOps   (https://github.com/solutions/use-case/ci-cd) CI/CD   (https://github.com/solutions/use-case) View all use cases         BY INDUSTRY (https://github.com/solutions/industry/healthcare) Healthcare   (https://github.com/solutions/industry/financial-services) Financial services   (https://github.com/solutions/industry/manufacturing) Manufacturing   (https://github.com/solutions/industry/government) Government   (https://github.com/solutions/industry) View all industries          (https://github.com/solutions) View all solutions         Resources   EXPLORE BY TOPIC (https://github.com/resources/articles?topic=ai) AI   (https://github.com/resources/articles?topic=software-development) Software Development   (https://github.com/resources/articles?topic=devops) DevOps   (https://github.com/resources/articles?topic=security) Security   (https://github.com/resources/articles) View all topics         EXPLORE BY TYPE (https://github.com/customer-stories) Customer stories   (https://github.com/resources/events) Events & webinars   (https://github.com/resources/whitepapers) Ebooks & reports   (https://github.com/solutions/executive-insights) Business insights   (https://skills.github.com) GitHub Skills        SUPPORT & SERVICES (https://docs.github.com) Documentation     (https://support.github.com) Customer support     (https://github.com/orgs/community/discussions) Community forum   (https://github.com/trust-center) Trust center   (https://github.com/partners) Partners       (https://github.com/resources) View all resources         Open Source   COMMUNITY (https://github.com/open-source/sponsors)   GitHub Sponsors Fund open source developers       PROGRAMS (https://securitylab.github.com) Security Lab     (https://maintainers.github.com) Maintainer Community     (https://stars.github.com) GitHub Stars     (https://archiveprogram.github.com) Archive Program        REPOSITORIES (https://github.com/topics) Topics   (https://github.com/trending) Trending   (https://github.com/collections) Collections          Enterprise   ENTERPRISE SOLUTIONS (https://github.com/enterprise)   Enterprise platform AI-powered developer platform       AVAILABLE ADD-ONS (https://github.com/security/advanced-security)   GitHub Advanced Security Enterprise-grade security features    (https://github.com/features/copilot/copilot-business)    Copilot for Business Enterprise-grade AI features    (https://github.com/enterprise/premium-support)   Premium Support Enterprise-grade 24/7 support           (https://github.com/pricing) Pricing      Search /       (https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fmxc) Sign in    (https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=microsoft%2Fmxc) Sign up         Appearance settings            You signed in with another tab or window. (mxc.html) Reload to refresh your session. You signed out in another tab or window. (mxc.html) Reload to refresh your session. You switched accounts on another tab or window. (mxc.html) Reload to refresh your session.    Dismiss alert     (https://github.githubassets.com/assets/ym-4c4d2b70d5b17037.js)  (https://github.githubassets.com/assets/mng-af5547fcfd291f53.js)  (https://github.githubassets.com/assets/t5-8ffaa093c3420000.js)  (https://github.githubassets.com/assets/j24-43443b443f213349.js)  (https://github.githubassets.com/assets/vw-9a8839ba1b0498ae.js)  (https://github.githubassets.com/assets/ac-330683e1e1b3028b.js)  (https://github.githubassets.com/assets/f4t-6a4e2ce1a3f6bcd5.js)  (https://github.githubassets.com/assets/36-e7bb48b69e86f71b.js)  (https://github.githubassets.com/assets/tps-84accc305677e828.js)  (https://github.githubassets.com/assets/e8k-f5cca939ef074708.js)  (https://github.githubassets.com/assets/nx-e5a4a427b19a5363.js)  (https://github.githubassets.com/assets/3s-7ab43a292b98ba5f.js)  (https://github.githubassets.com/assets/a1w-8b2cb4a1188ed337.js)  (https://github.githubassets.com/assets/nr-79588a4a563e6198.js)  (https://github.githubassets.com/assets/global-nav-bar-3f93ce7e68bc7168.js)  (../../github.githubassets.com/assets/primer-react-css.e4334163c54cccf5.module.css)  (../../github.githubassets.com/assets/45z.922f816fb2d6b268.module.css)  (../../github.githubassets.com/assets/global-nav-bar.9f560a86de809a16.module.css)  (https://github.com/microsoft) microsoft   (mxc.html) mxc        Repository navigation  (mxc.html)    Code   (https://github.com/microsoft/mxc/issues)     Issues 37 (37)    (https://github.com/microsoft/mxc/pulls)    Pull requests 14 (14)    (https://github.com/microsoft/mxc/actions)    Actions   (https://github.com/microsoft/mxc/projects)    Projects   (https://github.com/microsoft/mxc/security)    Security and quality   (https://github.com/microsoft/mxc/pulse)    Insights     Moreitems              (../../avatars.githubusercontent.com/u/6154722@s=60&v=4)   (mxc.html)   (microsoft)  (mxc) (mxc.html) mxc   Public    (https://github.com/login?return_to=%2Fmicrosoft%2Fmxc)    Notifications   You must be signed in to change notification settings  (https://github.com/login?return_to=%2Fmicrosoft%2Fmxc)    Fork110  (110 )     (https://github.com/login?return_to=%2Fmicrosoft%2Fmxc)    Star2k  (2k )    You must be signed in to star a repository      About  Policy-driven, layered isolation and containment  Resources  (mxc.html#readme-ov-file)   Readme   (mxc.html#MIT-1-ov-file)   MIT license   Code of conduct  (mxc.html#coc-ov-file)   Code of conduct   Contributing  (mxc.html#contributing-ov-file)   Contributing   Security policy  (mxc.html#security-ov-file)   Security policy   (https://github.com/microsoft/mxc/activity)   Activity   (https://github.com/microsoft/mxc/custom-properties)   Custom properties    Stars    2.0k stars  Watchers    10 watching  Forks  (https://github.com/microsoft/mxc/forks)   110  forks     (https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fmxc&report=microsoft+%28user%29) Report repository            main           (https://github.com/microsoft/mxc/branches)    Branches   (https://github.com/microsoft/mxc/tags)    Tags    (https://github.com/microsoft/mxc/branches)    (https://github.com/microsoft/mxc/tags)          (Go to file) ()      Go to file        Code         Open more actions menu     Latest commit   History (https://github.com/microsoft/mxc/commits/main/)    490 Commits     (https://github.com/microsoft/mxc/commits/main/)      490 Commits      Folders and files Name  Name  (Last commit message) Last commit message   (Last commit date) Last commit date       (.azure-pipelines) (https://github.com/microsoft/mxc/tree/main/.azure-pipelines) .azure-pipelines        (.azure-pipelines) (https://github.com/microsoft/mxc/tree/main/.azure-pipelines) .azure-pipelines              (.cargo) (https://github.com/microsoft/mxc/tree/main/.cargo) .cargo        (.cargo) (https://github.com/microsoft/mxc/tree/main/.cargo) .cargo              (.config) (https://github.com/microsoft/mxc/tree/main/.config) .config        (.config) (https://github.com/microsoft/mxc/tree/main/.config) .config              (.github) (https://github.com/microsoft/mxc/tree/main/.github) .github        (.github) (https://github.com/microsoft/mxc/tree/main/.github) .github              (docs) (https://github.com/microsoft/mxc/tree/main/docs) docs        (docs) (https://github.com/microsoft/mxc/tree/main/docs) docs              (This path skips through empty directories) (https://github.com/microsoft/mxc/tree/main/external/windows-sdk) external/ windows-sdk         (This path skips through empty directories) (https://github.com/microsoft/mxc/tree/main/external/windows-sdk) external/ windows-sdk               (samples) (https://github.com/microsoft/mxc/tree/main/samples) samples        (samples) (https://github.com/microsoft/mxc/tree/main/samples) samples              (schemas) (https://github.com/microsoft/mxc/tree/main/schemas) schemas        (schemas) (https://github.com/microsoft/mxc/tree/main/schemas) schemas              (scripts) (https://github.com/microsoft/mxc/tree/main/scripts) scripts        (scripts) (https://github.com/microsoft/mxc/tree/main/scripts) scripts              (sdk) (https://github.com/microsoft/mxc/tree/main/sdk) sdk        (sdk) (https://github.com/microsoft/mxc/tree/main/sdk) sdk              (src) (https://github.com/microsoft/mxc/tree/main/src) src        (src) (https://github.com/microsoft/mxc/tree/main/src) src              (tests) (https://github.com/microsoft/mxc/tree/main/tests) tests        (tests) (https://github.com/microsoft/mxc/tree/main/tests) tests              (.editorconfig) (https://github.com/microsoft/mxc/blob/main/.editorconfig) .editorconfig        (.editorconfig) (https://github.com/microsoft/mxc/blob/main/.editorconfig) .editorconfig              (.gitattributes) (https://github.com/microsoft/mxc/blob/main/.gitattributes) .gitattributes        (.gitattributes) (https://github.com/microsoft/mxc/blob/main/.gitattributes) .gitattributes              (.gitignore) (https://github.com/microsoft/mxc/blob/main/.gitignore) .gitignore        (.gitignore) (https://github.com/microsoft/mxc/blob/main/.gitignore) .gitignore              (CONTRIBUTING.md) (https://github.com/microsoft/mxc/blob/main/CONTRIBUTING.md) CONTRIBUTING.md        (CONTRIBUTING.md) (https://github.com/microsoft/mxc/blob/main/CONTRIBUTING.md) CONTRIBUTING.md              (LICENSE.md) (https://github.com/microsoft/mxc/blob/main/LICENSE.md) LICENSE.md        (LICENSE.md) (https://github.com/microsoft/mxc/blob/main/LICENSE.md) LICENSE.md              (README.md) (https://github.com/microsoft/mxc/blob/main/README.md) README.md        (README.md) (https://github.com/microsoft/mxc/blob/main/README.md) README.md              (SECURITY.md) (https://github.com/microsoft/mxc/blob/main/SECURITY.md) SECURITY.md        (SECURITY.md) (https://github.com/microsoft/mxc/blob/main/SECURITY.md) SECURITY.md              (SUPPORT.md) (https://github.com/microsoft/mxc/blob/main/SUPPORT.md) SUPPORT.md        (SUPPORT.md) (https://github.com/microsoft/mxc/blob/main/SUPPORT.md) SUPPORT.md              (TRADEMARKS.md) (https://github.com/microsoft/mxc/blob/main/TRADEMARKS.md) TRADEMARKS.md        (TRADEMARKS.md) (https://github.com/microsoft/mxc/blob/main/TRADEMARKS.md) TRADEMARKS.md              (build-mac.sh) (https://github.com/microsoft/mxc/blob/main/build-mac.sh) build-mac.sh        (build-mac.sh) (https://github.com/microsoft/mxc/blob/main/build-mac.sh) build-mac.sh              (build.bat) (https://github.com/microsoft/mxc/blob/main/build.bat) build.bat        (build.bat) (https://github.com/microsoft/mxc/blob/main/build.bat) build.bat              (build.sh) (https://github.com/microsoft/mxc/blob/main/build.sh) build.sh        (build.sh) (https://github.com/microsoft/mxc/blob/main/build.sh) build.sh              (es-metadata.yml) (https://github.com/microsoft/mxc/blob/main/es-metadata.yml) es-metadata.yml        (es-metadata.yml) (https://github.com/microsoft/mxc/blob/main/es-metadata.yml) es-metadata.yml              (global.json) (https://github.com/microsoft/mxc/blob/main/global.json) global.json        (global.json) (https://github.com/microsoft/mxc/blob/main/global.json) global.json            View all files        Repository files navigation  (mxc.html#)    README   (mxc.html#)    Code of conduct   (mxc.html#)    Contributing   (mxc.html#)    MIT license   (mxc.html#)    Security     Moreitems               Microsoft eXecution Container (MXC) (mxc.html#microsoft-execution-container-mxc)     MXC is a sandboxed code execution system for running untrusted code
(model output, plugins, and tools) on Windows, Linux, and macOS. It provides
multiple containment backends, from OS-native process sandboxes to full VMs,
behind a unified containment model and typed SDKs. Features (mxc.html#features)     Cross-platform : Windows, Linux, and macOS support with
platform-appropriate containment backends JSON-based configuration : Versioned container-creation requests and
security policies Multiple containment backends : ProcessContainer, Windows Sandbox, LXC,
Bubblewrap, Seatbelt, MicroVM (Nanvix), Hyperlight, IsolationSession, and WSLC Policy-driven sandboxing : Filesystem policy : Read-only, read-write, and denied path lists Network policy : Proxy support, outbound controls, and backend-dependent
host filtering UI policy : Clipboard, display, and GUI access controls   State-aware lifecycle : Provision, start, execute, stop, and deprovision
persistent containers Rust, .NET, and Node SDKs : Versioned APIs for one-shot and state-aware
execution Diagnostics : Tools to understand access-denied failures in a container  What is MXC? (mxc.html#what-is-mxc)     MXC is an SDK dependency that builds into your app. flowchart LR
    App["Your application<br/>Launch API"] --> SDK["MXC SDK<br/>Rust / .NET / Node<br/>(in process)"]
    SDK --> Backend["Selected backend<br/>(in process)"]
    Backend --> Container["Isolated workload<br/>ProcessContainer / WSLC / Bubblewrap / ..."]       Loading    Your application specifies: The container type The containment rules The workload command  MXC validates the request, selects the backend, and launches the workload in
the resulting container. What container types are supported? (mxc.html#what-container-types-are-supported)     MXC runs workloads through platform-appropriate container backends on Windows,
Linux, and macOS. Runtime platform Default backend Other backends Minimum host OS   Windows 11 x64 / ARM64 processcontainer  windows_sandbox *, wslc , microvm *, hyperlight *, isolation_session  (https://github.com/microsoft/mxc/blob/main/docs/backends/process-container/os-version-support.md) Windows OS-version support   Linux x64 / ARM64 bubblewrap  lxc , microvm , hyperlight  -  macOS ARM64 / x64 seatbelt  - -     * These backends are experimental . How do I use MXC? (mxc.html#how-do-i-use-mxc)     Install an SDK through your package manager. You do not need to clone this
repository. SDK Package   Rust (https://crates.io/crates/mxc-sdk) https://crates.io/crates/mxc-sdk   .NET (https://www.nuget.org/packages/Microsoft.Mxc.Sdk) https://www.nuget.org/packages/Microsoft.Mxc.Sdk   Node (https://www.npmjs.com/package/@microsoft/mxc-sdk) https://www.npmjs.com/package/@microsoft/mxc-sdk      The Node and .NET packages include the native runtime assets. The Rust crate
builds the MXC SDK, engine, and selected backends into the consuming
application. Non-SDK consumption: Platform-specific executor binaries, such as wxc-exec.exe , accept JSON container-creation requests defined by the (https://github.com/microsoft/mxc/blob/main/schemas/stable) stable schema . Use for testing or when the
SDK cannot be embedded in your app. Running a contained workload (mxc.html#running-a-contained-workload)     For complete SDK samples, see the (https://github.com/microsoft/mxc/blob/main/samples/README.md) Rust, .NET, and Node samples . Sample Node snippet (mxc.html#sample-node-snippet)     import { spawn , type ContainerRequest } from '@microsoft/mxc-sdk/v1' ; const request : ContainerRequest = { command : 'node -e "console.log(\'hello from container\')"' , network : { egress : { default : 'deny' } } , timeoutMs : 30_000 , } ; const child = await spawn ( request ) ;   See the runnable (https://github.com/microsoft/mxc/blob/main/samples/run-with-io-stdio-streaming) streaming standard-I/O sample and the (https://github.com/microsoft/mxc/blob/main/docs/api-reference/README.md) SDK API reference . My application won't run in the sandbox! (mxc.html#my-application-wont-run-in-the-sandbox)     Your application will hit access issues when running in a sandbox, until you've
had time to tune your containment rules. We're here to help. Debug console mode (mxc.html#debug-console-mode)     Native executors normally reserve standard input, output, and error for the
workload. Use --debug for MXC diagnostic output: wxc-exec.exe --debug config.json  See (https://github.com/microsoft/mxc/blob/main/docs/development/guides/diagnostics.md) MXC diagnostics for the complete
developer reference. Audit mode (mxc.html#audit-mode)     Warning: --audit turns off all sandbox security for the workload being
analyzed. Never use it to run untrusted code.  Audit mode helps a policy author find access-denied failures and reconstruct a
ProcessContainer policy that grants the files and capabilities a trusted tool
actually needs. On supported Windows releases, run: wxc-exec.exe --audit policy.json  MXC records the observed accesses and produces policy-authoring artifacts. See (https://github.com/microsoft/mxc/blob/main/docs/logging-access-denied.md) logging access denied for safe
deny-and-record diagnostics, audit outputs, and supported workflows. Telemetry (mxc.html#telemetry)     Official Microsoft builds can send optional diagnostic telemetry to Microsoft.
Telemetry is off unless the individual run opts in, the Windows user has
explicitly consented, administrative policy permits collection, and your
application enables the telemetry option in a contained workload request. An
administrator can block telemetry but cannot grant consent for the user. Local open-source builds are not configured to route telemetry to Microsoft,
and telemetry is a no-op on non-Windows platforms. See (https://github.com/microsoft/mxc/blob/main/docs/telemetry.md) telemetry policy and consent for controls and privacy
details. Building from source (mxc.html#building-from-source)     Build from source when developing MXC, changing the native runtime, or using
the standalone executor binaries instead of a packaged SDK. Repository builds
produce the platform-native runtime and executors and stage the native assets
used by the Node SDK. Build prerequisites are: (https://rustup.rs/) Rust , pinned to version 1.93 by src/rust-toolchain.toml  Node.js 24 or later and npm The platform toolchain and prerequisites described by the selected backend  Build (mxc.html#build)     Windows (mxc.html#windows)     build.bat --all # Release build for current architecture   Linux (mxc.html#linux)     ./build.sh --all # Release build   macOS (mxc.html#macos)     ./build-mac.sh --all # Release build for native architecture   Documentation (mxc.html#documentation)     Consumer documentation (mxc.html#consumer-documentation)     Document Repository location Purpose   SDK samples (https://github.com/microsoft/mxc/blob/main/samples/README.md) samples/   Runnable Rust, .NET, and Node scenarios  SDK API reference (https://github.com/microsoft/mxc/blob/main/docs/api-reference/README.md) docs/api-reference/   Supported V1 operations and types  Container lifecycle (https://github.com/microsoft/mxc/blob/main/docs/container-lifecycle.md) docs/container-lifecycle.md   Persistent container lifecycle overview  Logging access denied (https://github.com/microsoft/mxc/blob/main/docs/logging-access-denied.md) docs/logging-access-denied.md   Diagnose blocked accesses and author policy  Telemetry (https://github.com/microsoft/mxc/blob/main/docs/telemetry.md) docs/telemetry.md   Consent and administrative controls  Backend guides (https://github.com/microsoft/mxc/blob/main/docs/backends) docs/backends/   Platform and backend prerequisites and behavior     Repository contributors should start with the (https://github.com/microsoft/mxc/blob/main/docs/development/README.md) MXC development documentation . Contributing (mxc.html#contributing)     See (https://github.com/microsoft/mxc/blob/main/CONTRIBUTING.md) CONTRIBUTING.md for contribution guidelines. License (mxc.html#license)     See (https://github.com/microsoft/mxc/blob/main/LICENSE.md) LICENSE.md for details.          About  Policy-driven, layered isolation and containment  Resources  (mxc.html#readme-ov-file)   Readme   (mxc.html#MIT-1-ov-file)   MIT license   Code of conduct  (mxc.html#coc-ov-file)   Code of conduct   Contributing  (mxc.html#contributing-ov-file)   Contributing   Security policy  (mxc.html#security-ov-file)   Security policy   (https://github.com/microsoft/mxc/activity)   Activity   (https://github.com/microsoft/mxc/custom-properties)   Custom properties    Stars    2.0k stars  Watchers    10 watching  Forks  (https://github.com/microsoft/mxc/forks)   110  forks     (https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fmxc&report=microsoft+%28user%29) Report repository    Releases     Used by    Contributors    Languages                            Footer (https://github.com)    © 2026 GitHub, Inc.   Footer navigation (https://docs.github.com/site-policy/github-terms/github-terms-of-service) Terms  (https://docs.github.com/site-policy/privacy-policies/github-privacy-statement) Privacy  (https://github.com/security) Security  (https://www.githubstatus.com/) Status  (https://github.community/) Community  (https://docs.github.com/) Docs  (https://support.github.com?tags=dotcom-footer) Contact  Manage cookies    Do not share my personal information              You can’t perform that action at this time.