How much does Freestyle cost?

Free includes 200 vCPU hours, 400 GiB hours of memory and 10 concurrent VMs as hard limits. Hobby costs $50 a month and Pro $500 a month, with each fee covering usage up to its value and further usage at $0.04032 per vCPU hour and $0.0129 per GiB of memory an hour, and Enterprise is priced by sales.

Does Freestyle support MCP and tool calling?

Full under the Agentic Index verification standard. Freestyle publishes public evidence of Model Context Protocol (MCP) support, tool calling, and API or SDK extensibility for connecting agents to external tools. Evidence basis: A TypeScript SDK and the freestyle command line tool cover VMs, execution, files, snapshots, PTY sessions, domains, firewall rules, VPCs, tunnels, outbound TLS rules, client session identities and API tokens. Freestyle offers no MCP server. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Can you bring your own model or route between providers with Freestyle?

Full under the Agentic Index verification standard. Freestyle publishes public evidence of bring your own model and bring your own key (BYOK), and of routing tasks between models or providers rather than being locked to one. Evidence basis: The customer chooses the agents and models that run on a VM. Outbound rules inject keys for providers such as OpenAI, Anthropic or OpenRouter, and a JSON patch rule can set or change the model field in request bodies at the edge, so the cus. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Freestyle have SOC 2, SSO and role based access control?

Partial under the Agentic Index verification standard. Freestyle publishes some public evidence of security and identity controls, but narrower than the full set of SOC 2, single sign on (SSO) and role based access control (RBAC). Evidence basis: Team API keys manage resources, and client sessions give an end user or agent its own identity with access to chosen VMs and Linux users through a token that can be revoked without rotating the team key. Secrets in outbound rules are write. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Back to vendors

Freestyle

Q: Who is Freestyle for?

AI product teams, agent builders, developers

Also known as: freestyle.sh, Freestyle VMs, Freestyle Sandboxes

Visit site

Agent infrastructureindependentVerified 2026-11-05

Entry priceHobby at $50 a month, which covers usage up to $50 before further usage bills, after a free plan with hard limits.Full pricing detail

Freestyle runs full Linux VMs for AI agents that start in milliseconds, pause and resume with memory intact, wake on incoming traffic, and reach outside services through an edge that injects credentials the VM never sees.

Freestyle sells full Linux virtual machines for AI agents and the code they run, built for tasks that last hours, days or weeks. A VM starts in milliseconds, with a p99 under 400ms, supports nested virtualization, Docker, FUSE and eBPF, and can be snapshotted, cloned with its memory, paused with its processes intact and resumed later exactly as it was. Freestyle counts Onlook, Wordware, Bloom, a0, OpenWork and cmux among its customers, and aims the VMs at long running agent tasks, work that needs branching or rollback, and multi tenant agent products.

Every VM starts with no network access until firewall rules allow it, and VPCs and WireGuard tunnels connect VMs to each other and to remote networks. Outbound TLS rules let a VM reach APIs such as OpenAI, Anthropic or OpenRouter, Postgres databases and S3 storage through Freestyle's edge, which adds the API key, password or request signature so the VM only ever holds a placeholder, and can rewrite JSON bodies to pin a model. VMs get preview URLs with custom domains and managed HTTPS, pause when idle and wake on the next request, and client sessions give an end user or agent a token for chosen VMs and Linux users without the team's API key. A TypeScript SDK and CLI drive it all.

The Free plan includes 200 vCPU hours, 400 GiB hours of memory and 10 concurrent VMs as hard limits, Hobby costs $50 a month and Pro $500 a month, each fee covering usage up to its value, and usage beyond that bills at $0.04032 per vCPU hour and $0.0129 per GiB of memory an hour. Enterprise adds SAML single sign on, SCIM, audit logs and a 99.99% SLA. Freestyle has no public compliance attestation and offers no choice of region.

Freestyle fits teams building agent products that give each user or task its own long lived VM, need pauses and clones that keep memory, and want credentials and network access controlled from outside the machine. It fits less well for buyers who want a compliance report, a chosen data region, a browser for agents to drive, or approval steps and tracing for agent actions.

Vendor details

Canonical URL

https://www.freestyle.sh

Funding status

Freestyle has no disclosed funding.

Company status

independent

Use cases & customers

Primary use cases

agent sandboxescoding agentsmulti tenant agent productslong running agent tasksapp previews

Target customers

AI product teamsagent buildersdevelopers

Deployment options

SaaSAPIPrivate networking

Integrations

A TypeScript SDK and the freestyle CLI manage VMs, snapshots, domains, firewall rules, VPCs, tunnels, outbound TLS rules and client session tokens. Outbound TLS rules inject credentials for HTTP APIs such as OpenAI, Anthropic and OpenRouter, external Postgres databases and S3 compatible storage, route traffic through a customer's SOCKS5 proxy, and reach other VMs by internal names, while WireGuard tunnels connect VMs to remote networks. Guides cover Claude Code, Python, Node.js, Go, Bun, Chromium, Docker, PostgreSQL, Redis, Supabase and Vite on a VM, with Kali Linux and BusyBox base snapshots.

In practice

Your product gives every user an agent that works on their project for days. Give each user a Freestyle VM that pauses when idle and resumes with its memory and processes intact when the user returns or a request reaches its preview URL.

Your agent needs to call Anthropic and query your Postgres database, but the VM must never hold either credential. Add outbound TLS rules that inject the API key and database password at Freestyle's edge, and the VM connects using placeholders.

Your agent is about to try a risky refactor. Snapshot or clone the running VM first, let the agent work on the copy, and keep whichever version comes out right.

Sources & related URLs

Research sources

https://www.freestyle.sh https://www.freestyle.sh/pricing https://www.freestyle.sh/docs https://www.freestyle.sh/docs/quickstart https://www.freestyle.sh/docs/vms/lifecycle https://www.freestyle.sh/docs/vms/network/firewall https://www.freestyle.sh/docs/vms/network/tls-outbound https://www.freestyle.sh/docs/vms/client-sessions https://www.freestyle.sh/docs/vms/pricing-and-limits

Agentic Index coverage score

5.5 / 14 capabilities · 39%

Integrations & Tool Calling	Partial
Credentials reach outside services without entering the VM. Outbound TLS rules let Freestyle's edge add API keys to requests for services such as OpenAI, Anthropic or OpenRouter, connect to external Postgres with a password the VM never sees, sign S3 requests limited to a bucket, prefix and set of operations, route traffic through the customer's SOCKS5 proxy and reach other VMs by internal names, and WireGuard tunnels connect VMs to remote networks. There are no prebuilt connectors or tool catalog for an agent to call. Sourcefreestyle.sh/docs/vms/network/tls-outboundread 2026-11-05
Workflow Orchestration	Not documented
There is no workflow logic in the product. Run limits pause a VM after a set time, TTLs delete it and snapshots support branching and rollback, but sequencing, retrying and routing an agent's steps stay in the customer's own code. Sourcefreestyle.sh/docs/vms/lifecycleread 2026-11-05
Knowledge Grounding & RAG	Not documented
No retrieval index or knowledge base over the customer's content comes with the platform. Files an agent reads live on the VM's disk, and any retrieval runs as the customer's own software inside the VM. Sourcefreestyle.sh/docs/vmsread 2026-11-05
Human Oversight & Guardrails	Not documented
Work in a VM has no approval step, consent checkpoint or escalation to a person. A default closed firewall, forward auth on domains and credentials held at the edge limit what an agent can reach, but nothing holds an action until someone reviews it. Sourcefreestyle.sh/docs/vms/network/firewallread 2026-11-05
Security, Identity & Governance	Partial
Team API keys manage resources, and client sessions give an end user or agent its own identity with access to chosen VMs and Linux users through a token that can be revoked without rotating the team key. Secrets in outbound rules are write only and sealed at rest, and every VM starts with no network access until rules allow it. SAML single sign on and SCIM come with Enterprise, and Freestyle names no compliance attestation. Sourcefreestyle.sh/docs/vms/client-sessionsread 2026-11-05
Observability & Auditability	Partial
Audit logs come with the Enterprise plan. No logs, metrics or traces come with the VMs, so what an agent did inside a VM is visible only through the customer's own tooling and the command output returned to the caller. Sourcefreestyle.sh/pricingread 2026-11-05
Memory & State Persistence	Partial
An agent's working state carries across sessions as machine state. A paused VM keeps its memory and resumes the same processes, persistent VMs keep their disks between runs, and snapshots and live cloning create new VMs that match the original for branching and recovery. Files on a paused VM stay readable without resuming it. This is machine state the developer manages, not a memory layer of stated scope that can be reviewed or deleted as memory. Sourcefreestyle.sh/docs/vms/lifecycleread 2026-11-05
Deployment & Data Residency	Not documented
Freestyle runs as a hosted service with no choice of region and no self hosted or customer cloud option. VPCs and WireGuard tunnels connect VMs to the customer's networks without moving where the VMs run. Sourcefreestyle.sh/docs/vms/pricing-and-limitsread 2026-11-05
Prebuilt Agents / Templates / Packs	Partial
Starting points come as base snapshots and setup guides. Public base snapshots include Kali Linux and BusyBox and sit outside each plan's snapshot limit, and guides set up Claude Code, Python, Node.js, Go, Bun, Chromium, Docker, PostgreSQL, Redis, Supabase and Vite on a VM. These are environments a developer builds from, not prebuilt agents a business adopts. Sourcefreestyle.sh/docs/vms/base-snapshotsread 2026-11-05
Triggers & Channel Coverage	Full
A paused VM wakes without the customer's code calling it. The next traffic that reaches the VM resumes it with its processes and memory intact, after a forward auth check when one is set, so an agent or app served from a Freestyle VM answers requests at its domain and pauses again when idle. There is no scheduler or webhook. Sourcefreestyle.sh/docs/vms/lifecycleread 2026-11-05
Model Flexibility & Routing	Full
The customer chooses the agents and models that run on a VM. Outbound rules inject keys for providers such as OpenAI, Anthropic or OpenRouter, and a JSON patch rule can set or change the model field in request bodies at the edge, so the customer can pin which model an agent calls. Sourcefreestyle.sh/docs/vms/network/tls-outboundread 2026-11-05
APIs / SDKs / MCP Extensibility	Full
A TypeScript SDK and the freestyle command line tool cover VMs, execution, files, snapshots, PTY sessions, domains, firewall rules, VPCs, tunnels, outbound TLS rules, client session identities and API tokens. Freestyle offers no MCP server or public REST reference. Sourcefreestyle.sh/docs/quickstartread 2026-11-05
Testing, Debugging & Optimization	Not documented
There are no test cases, scoring or quality gates for an agent's behavior. Snapshots and cloning let experiments branch and roll back, with any evaluation done in the customer's own code. Sourcefreestyle.sh/docs/vmsread 2026-11-05
Browser / Computer-use	Not documented
No browser or desktop for an agent to drive comes with the platform. Chromium appears among the setup guides for software to install on a VM, and an agent that needs a browser runs and drives it itself. Sourcefreestyle.shread 2026-11-05

The Agentic Index coverage score grades every vendor Full, Partial or Not documented against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded

Pricing

Hobby at $50 a month, which covers usage up to $50 before further usage bills, after a free plan with hard limits.

vCPU hours, GiB of memory hours and GiB of storage hours, plus data transfer

Free tier

Included quota

Every plan includes 200 vCPU hours, 400 GiB hours of memory and 60,000 GiB hours of storage a month, with 50 GB of data transfer on Free and 500 GB on paid plans. Free allows 10 concurrent and 10 saved VMs up to 4 vCPU and 8 GiB each, Hobby 40 concurrent and 200 saved up to 8 vCPU and 16 GiB, and Pro 400 concurrent and 4,000 saved up to 32 vCPU and 64 GiB.

What is public

Freestyle publishes every plan price, the per resource rates and included amounts, concurrency, saved VM, snapshot and per VM size limits, and what Enterprise adds.

Billing mechanics

Running VMs bill by vCPU hour and GiB of memory hour, storage bills by GiB hour, and paused VMs hold no compute reservation. On Hobby and Pro the monthly fee is spent against that usage before any further charges.

Cost watchouts

Saved and paused VMs and snapshots keep billing for storage until deleted, and whether a paused VM's preserved memory counts as storage is unclear. Data transfer beyond the plan allowance bills at $0.02 per GB.

Variable cost rationale

Beyond the fee's value, cost follows the vCPUs and memory of every running VM by the hour plus storage for every saved VM and snapshot, so fleets of per user VMs scale the bill directly, although paused VMs bill only for storage.

Additional watchouts

The default VM of 4 vCPU and 8 GiB costs about $0.26 an hour while running, so the 200 included vCPU hours cover about 50 hours of one default VM a month.

Overage / add-ons

On Hobby and Pro the monthly fee covers usage up to its value, and usage beyond that bills at the per resource rates. Free allowances are hard limits with no paid overage.

Sales call required

Mixed (some tiers require a call)

Free / trial

Free plan with 200 vCPU hours, 400 GiB hours of memory and 10 concurrent VMs a month as hard limits

Lowest paid plan

Hobby, $50 a month

Commercial notes

Freestyle sells Free, Hobby and Pro self serve and Enterprise through sales, with SAML, SCIM, audit logs and a 99.99% SLA reserved for Enterprise.

Key ambiguities

Whether snapshot storage and a paused VM's saved memory bill at the storage rate is unclear, and Enterprise terms such as active CPU or node based pricing are quoted only by sales.

Missing data

No separate price for snapshot or paused memory storage, no regions and no Enterprise prices.

Agentic Index verified 2026-11-05

Official pricing page Docs

Data confidence: medium

Head to head

Freestyle vs boxdFreestyle vs E2BFreestyle vs Fly.io SpritesFreestyle vs Morph Cloud