Your credentials stay out of reach.
The sandbox holds no cookies, no tokens, no keys from your machine. A compromised agent has nothing to take. It works on the page, not on your stack.
OPENCLAW · LIVEHosted sandbox
Run OpenClaw in a disposable cloud sandbox.
A hosted browser, spawned fresh for one run. The agent reaches the page, not your machine. One click to start. One click to destroy.
no cli. no docker. no api keys.
How containment works
Capability is the easy part. Containment is the point.
An autonomous agent does what the page tells it. So the page should never reach you. The hosted sandbox is the boundary. Here is what it contains.
Prompt injection stays in the session.
A hijacked agent reaches only what you scoped. The blast radius ends at the sandbox wall. It cannot pivot to your laptop, your files, or your network.
A fresh residential IP, every run.
Each sandbox boots on a real residential IP. Sites see a real browser, not a datacenter range. The agent gets in where headless tools get blocked.
Nothing persists after a run.
Close the session and the environment is destroyed. Cookies, storage, fingerprint, all gone. Nothing escapes because nothing is left.
The hosted run
Spawn. Run agent. Burn.
One disposable browser, one run, no leftovers. The sandbox boots, the agent works inside it, and the whole environment is destroyed on close.
[ hosted run ]
Spawn the sandbox.
One click boots a hosted disposable browser. Real residential IP, fresh fingerprint. No CLI, no Docker, no keys.
Run the agent.
OpenClaw drives inside the session. It reaches the page, not your credentials, cookies, or machine.
Burn it on close.
The run ends, you close it, the environment is destroyed. No cleanup. No trail. Nothing persists.
Access anything.
Expose nothing.
Legba is a disposable real browser: it spawns a clean session, does the work, and destroys itself on close.
chromium / real fingerprint · residential ip · burn on close
Real browser. Real IP. Real page. Spawn a session. Do the work. Destroy it. Off your device. Off your stack. Gone on close.