Vercel Sandbox Is Now One of Eight Places to Run Cursor's Agents

Cursor’s Cloud Agents can now execute inside Vercel Sandbox instead of Cursor’s own hosted machines, Vercel announced this week (Vercel changelog, “Cursor Cloud Agents can now run in Vercel Sandbox,” Sept 3, 2026). Vercel is one of eight infrastructure vendors that got the identical integration in the same release.

---

What changed

The feature ships under Cursor’s new Self-Hosted Machines system, introduced in a Cursor blog post a day earlier (Cursor, “Run cloud agents on machines you manage,” Sept 2, 2026). Cursor still owns the agent harness and inference loop, meaning the model that reasons about what to do next. Self-Hosted Machines APIs let a team supply the execution environment where an agent actually clones a repo, edits files and runs commands and tests, rather than defaulting to Cursor’s own fleet.

On Vercel specifically, each agent request gets an isolated Firecracker microVM through Vercel Sandbox, while Vercel Functions and Vercel Workflow act as a durable control plane: claiming queued agent requests, provisioning workers, monitoring sessions and cleaning up automatically when a run finishes (Vercel Knowledge Base, “Run Cursor Cloud Agents on Vercel Sandbox”). A team picks vercel-sandbox from Cursor’s Cloud Agents interface, and the requests route to Vercel’s infrastructure instead of Cursor’s. The option requires a Cursor Enterprise plan.

Vercel isn’t the exclusive backend, or even the first one named. Cursor’s own post lists eight partners shipping worker integrations for Self-Hosted Machines at once: AWS Lambda, Cloudflare, Coder, Daytona, E2B, Modal, Namespace and Vercel, with reference templates published for each (Cursor, “Run cloud agents on machines you manage,” Sept 2, 2026). A controller on Cursor’s side watches the request queue and runs a team-supplied spawn script to scale worker pools up and down with demand, regardless of which of the eight is doing the actual compute.

Why it matters

Vercel Sandbox has spent 2026 building a case for itself as general-purpose agent-execution infrastructure, not just a place to preview a pull request. It picked up preinstalled coding-agent images in August (Vercel changelog, “Vercel Sandbox now runs on Vercel Managed Images,” Aug 10, 2026) and AWS PrivateLink networking days ago (Vercel changelog, Sept 6, 2026). Landing as a Cursor Cloud Agents backend looks like validation of that push. But Cursor’s design treats the eight partners as interchangeable: the same worker contract, the same spawn-script model, the same scale-to-zero behavior, wherever a team already runs infrastructure. Cursor keeps the valuable part, the agent loop and inference, and pushes commodity compute out to whichever vendor a customer prefers.

Vercel didn’t win an exclusive integration; it qualified for a slot in a marketplace Cursor controls, alongside direct sandbox competitors E2B, Daytona and Modal. A team already committed to Vercel gets a lower-friction way to keep agent workloads on infrastructure it already pays for and networks it already trusts. That’s a real reason to pick vercel-sandbox over the other seven. It just isn’t a reason specific to Vercel.

The take

Cursor’s Self-Hosted Machines makes clear that the durable moat in agentic coding tools sits with whoever owns the agent loop, not whoever runs the microVM underneath it. Eight infrastructure vendors just agreed, simultaneously, to compete for that role as undifferentiated backends. Vercel Sandbox is a fine place to run Cursor’s agents. It’s also proof that being a fine place to run someone else’s agents is table stakes now, not a moat of its own.

Key Takeaways

• Cursor’s Cloud Agents can now run inside Vercel Sandbox, using isolated Firecracker microVMs with Vercel Functions and Vercel Workflow as the control plane; it requires a Cursor Enterprise plan.
• The integration ships under Cursor’s new Self-Hosted Machines system, which shipped the identical worker contract for eight infrastructure vendors at once: AWS Lambda, Cloudflare, Coder, Daytona, E2B, Modal, Namespace and Vercel.
• Cursor retains the agent harness and inference loop regardless of backend; only repo cloning, file edits and command execution move to the customer’s chosen infrastructure.
• The move follows Vercel Sandbox’s managed coding-agent images (August) and AWS PrivateLink support (September), continuing its push toward general-purpose agent-execution infrastructure.