October 9, 2026
Microsoft releases MXC 1.0: agents run in a sandbox with network off by default
Microsoft released MXC SDK 1.0.0 on Oct 7: the first stable release for Rust, .NET and Node.js. A command can run in a container in three ways: capturing output, live pipes or a PTY.
Install it with one command for your language: npm install @microsoft/mxc-sdk for Node, cargo add mxc-sdk for Rust, dotnet add package Microsoft.Mxc.Sdk for .NET.
Network closed by default. The Node example sets egress to default deny and a 30,000 millisecond timeout, then calls await spawn(request). Without explicit permission, the agent doesn't reach the network.
From preview to release. In July 2026, MXC was in early preview, with NVIDIA, OpenAI, Hermes, Manus and OpenClaw named as partners. GitHub Copilot CLI already used MXC process isolation. Now the first stable release, V1, is out, with a backend discovery API and file system policies.
Backends. On Windows 11 the default is processcontainer, on Linux bubblewrap, on macOS seatbelt. You choose one with a field in ContainerRequest. MicroVM on Windows 11 and Linux is still experimental.
Next, MXC connects with Intune, Microsoft Entra, Defender and Purview.