Architecture

OnlyBoxes uses a control-plane and execution-plane split.

OnlyBoxes architecture

Control node

The control node is the console, which exposes:

  • Dashboard UI
  • Dashboard implementation (OpenAPI + business logic)
  • MCP endpoint

It is primarily responsible for worker registration and account-related state management.

Worker nodes

Workers are responsible for the actual execution environment. A worker connects to the control node over gRPC, reports health, and receives execution requests through the control plane.

Why the split matters

  • You can keep authentication and administration centralized.
  • You can scale execution independently from the console.
  • Different worker implementations can coexist in the same deployment model.

Supported worker styles

WorkerBacking implementationExecution environmentRecommended use
worker-dockerruncDocker containersGeneral sandboxed code execution
worker-boxliteKVMboxliteSpecialized runtime backend
worker-bridge-e2bE2BRemote E2B sandboxesManaged remote sandbox execution
worker-sys-Host OS processesReal-device or direct host control

Deployment pattern

The common pattern is:

  1. Put the control node behind a reverse proxy or gateway.
  2. Expose dashboard HTTP and worker gRPC through TLS-terminated infrastructure.
  3. Run workers on separate machines that can reach the control node, and ensure the machines have sufficient resources.