OpenRouter puts the code sandbox inside the API request: any model can run shell server-side, with network off by default
OpenRouter has released two server-side code execution tools, openrouter:shell and openrouter:bash, which let a model run commands inside a platform-hosted isolated container during the API request instead of the developer operating a sandbox. Previously OpenAI, Anthropic and Google each offered this only for their own models, while self-hosting meant choosing an image, provisioning compute and owning the security boundary. Both tools are in beta, outbound network is off by default, sandbox time is billed at $0.0001 per second, and a new or sleeping container carries a 30-second minimum.