Microsoft introduced Microsoft Execution Containers (MXC) at the Build 2026 conference on June 2, 2026. This security toolkit provides an OS-level sandbox for autonomous AI agents, allowing developers to restrict agent access to specific data and resources.
The SDK functions as a policy-driven tool where developers define access rules using JSON or TypeScript. The operating system kernel enforces these policies in real time on Windows and Windows Subsystem for Linux (WSL).
Early adopters of the technology include GitHub Copilot, which has integrated process isolation into its command line interface, as well as the OpenClaw framework and NVIDIA OpenShell.
The current version, 0.8.0, was released in September 2026 and focuses on networking and policy management. Microsoft plans to integrate MXC with its Agent 365 platform and security tools like Entra, Defender, Intune, and Purview.
MXC is designed as a foundational building block rather than a standalone product. It addresses security risks such as unauthorized data access and UI spoofing by enforcing least-privilege access and binding agent actions to specific identities.
