HeadsUpAI

Notion Workers Run on Vercel Sandbox for Secure Agent Code Execution

· Updated

Vercel announced that Notion Workers — Notion's developer platform feature for extending AI agents with custom code — runs on Vercel Sandbox. Workers execute in ephemeral Firecracker microVMs, providing VM-level isolation stronger than containers. Vercel Sandbox handles credential injection at the network layer so API keys never enter the execution environment, dynamic network policies updatable at runtime, and snapshot-based filesystem state for fast cold starts.

Notion Workers supports three patterns: data syncing, custom automations, and agent tool calls — each requiring untrusted code to run safely inside enterprise workspaces. The challenge of isolation, credential security, network controls, and scale applies to any platform letting users or agents run custom code. Vercel Sandbox positions as the shared infrastructure layer for agent platforms facing the same requirements.

Platform builders needing secure agent code execution can use Vercel Sandbox as infrastructure — isolation, credential injection, and network policies provided out of the box.

Vercel
Vercel
@vercel
X

Vercel powers @NotionHQ's developer platform. Notion Workers use Vercel Sandbox to safely run code, giving agents the power to sync data, trigger automations, and call any API. https://t.co/sFDxfrtuuo

18retweets
View on X

Share this update