---
title: "How Cloud-Based Agent Sandboxing Works in Air"
description: "AI agents require sandboxing to restrict file, network, and system access, preventing unintended modifications and data leakage. The post categorizes five agent execution modes into local (workspace, git worktree) and remote (SSH, Docker, Cloud), with remote modes providing stronger isolation by default. In JetBrains Air, each cloud agent task runs in its own VM with the agent inside a Docker container, and all network connections are routed through a proxy that allows only trusted domains by default. Secrets are stored encrypted and exposed as environment variables, and the agent operates within the developer’s repository permissions. Cloud-based execution reduces local setup requirements and gives organizations control over network access policies, with cloud agents currently available to organizational users via Air in IDEs and Air Teams."
---

# How Cloud-Based Agent Sandboxing Works in Air

[Jetbrains](https://yomu.fyi/company/jetbrains) · Dennis Ushakov · Oct 14, 2026

**Type:** Explainer

## Summary

AI agents require sandboxing to restrict file, network, and system access, preventing unintended modifications and data leakage. The post categorizes five agent execution modes into local (workspace, git worktree) and remote (SSH, Docker, Cloud), with remote modes providing stronger isolation by default. In JetBrains Air, each cloud agent task runs in its own VM with the agent inside a Docker container, and all network connections are routed through a proxy that allows only trusted domains by default. Secrets are stored encrypted and exposed as environment variables, and the agent operates within the developer’s repository permissions. Cloud-based execution reduces local setup requirements and gives organizations control over network access policies, with cloud agents currently available to organizational users via Air in IDEs and Air Teams.

## Context

The need for sandboxing AI agents to prevent unintended system modifications, data leakage, and exploitation risks, and the trade-offs of five execution modes: local workspace, git worktree, SSH, Docker, and cloud-based execution.

## Approach / What changed

Each task in JetBrains Air starts a VM in the cloud, and the agent runs in a Docker container within that VM. A proxy routes all connections from the agent container, allowing only a preset list of trusted source control and package registry domains by default. Secrets are stored encrypted and exposed as environment variables, and the agent operates within the developer’s repository permissions.

## Takeaways

- AI agents can easily escape their current working directory without sandboxing, requiring OS-level tools or client enforcement.
- Remote execution modes like Docker and cloud isolate the agent from the developer’s machine by default, reducing local setup.
- In JetBrains Air each task runs in its own VM with the agent in a Docker container behind a network proxy that restricts access to trusted domains by default.

## FAQ

### How does cloud agent sandboxing work in Air?

Each task starts a VM in the cloud, the agent runs in a Docker container within that VM, and a proxy routes all connections from the agent container, allowing only trusted domains by default. Secrets are encrypted and the agent uses the developer's repository permissions.

### What are the five ways to run AI agents?

Local workspace, git worktree, SSH, Docker, and cloud. Local modes can escape the working directory; remote modes like Docker and cloud isolate by default.

### Why do AI agents need sandboxing?

To restrict file, network, and system access, preventing unintended modifications, data leakage, and exploitation when the agent behaves unexpectedly or is compromised.

**Tags:** [AI Agents](https://yomu.fyi/topic/ai-agents), [Cloud](https://yomu.fyi/topic/cloud), [JetBrains](https://yomu.fyi/topic/jetbrains), [Sandboxing](https://yomu.fyi/topic/sandboxing), [Security](https://yomu.fyi/topic/security)

- Source: [Jetbrains](https://blog.jetbrains.com/air/2026/10/cloud-agent-sandboxing)
- Source URL: https://blog.jetbrains.com/air/2026/10/cloud-agent-sandboxing
- Ingested by Yomu: 2026-10-14T15:00:14.691Z

[Read original post](https://blog.jetbrains.com/air/2026/10/cloud-agent-sandboxing)