# Let your AI agents use a Wuying cloud computer

Wuying (无影) is Alibaba Cloud's cloud computer service, sold outside China as Elastic Desktop Service. It gives you a Windows desktop that runs in Alibaba Cloud and that you open from a browser or the Wuying client.

[SFCrew](https://sfcrewai.com/) is an open source app for AI teammates that do real work. You talk to each bot in chat, and each bot gets a computer you can watch and take over. With Wuying, that computer is a Windows desktop you already run on Alibaba Cloud. It is the only way to give SFCrew bots Windows, and it suits teams on Alibaba Cloud or in mainland China, where other sandbox providers can be hard to reach.

Updated November 4, 2026.

## What is Wuying?

[Wuying](https://www.aliyun.com/product/ecs/gws) is Alibaba Cloud's line of cloud computers, also sold internationally as [Elastic Desktop Service](https://www.alibabacloud.com/en/product/cloud-desktop). Each cloud computer is a full Windows machine with its own disk, assigned to an end user and billed by Alibaba Cloud.

This is not AgentBay, Alibaba Cloud's separate sandbox service for agents. SFCrew uses one ordinary Wuying desktop that you have already created, and talks to it through the desktop's MCP gateway.

## What a bot can do on a Wuying desktop

Bots work on the Windows desktop the same way a person would, and you see the live screen in the computer panel next to the chat in the web and desktop apps.

- Run PowerShell commands. Output is switched to UTF-8, so Chinese text comes back readable.
- Read and write files. Each bot computer gets its own home folder under `%USERPROFILE%\sfcrew`, kept on the desktop's own disk.
- Take screenshots and use the mouse and keyboard, so it can work in Windows apps such as Excel, not only in a browser.
- Let you watch the screen live and take over when it needs a login or a decision.
- SFCrew starts the desktop when a bot needs it and powers it off when the last computer on it stops. Deleting a bot computer removes only its folder, never the desktop.

## When to choose Wuying

Choose Wuying when bots need Windows software, when your team already runs on Alibaba Cloud, or when you are in mainland China. It also lets a single person bring their own Windows desktop to a shared SFCrew without asking an admin.

For Linux computers with a desktop and browser, hosted options such as [Boat](https://sfcrewai.com/sandboxes/boat/), [E2B](https://sfcrewai.com/sandboxes/e2b/) and [Novita](https://sfcrewai.com/sandboxes/novita/) give each bot more isolation, a terminal and several screens at once. [Docker](https://sfcrewai.com/sandboxes/docker/) and [Kubernetes](https://sfcrewai.com/sandboxes/kubernetes/) keep computers on your own servers. To let a bot use your own Windows PC instead, see [your computer](https://sfcrewai.com/sandboxes/your-computer/). The [sandbox comparison](https://sfcrewai.com/sandboxes/) covers every option.

## Limits

- Everyone using the desktop, including Private Computers, shares one Windows account, its files and its signed-in apps. A screen login opened for watching can also control the desktop. Share one desktop only among people who trust each other.
- One screen viewer at a time. Opening the screen in a second browser or the Wuying client signs the other one out.
- No terminal you can open yourself, and no live screen in the mobile app.
- Each call to the desktop is capped at one minute and 16 KiB of output. Longer commands run detached and still stream their output.
- Windows-key shortcuts aren't available, and there are no snapshots.

## How to set it up

Any SFCrew account can point its own Team Computers at a Wuying desktop it brings. An admin can also make Wuying the default for everyone on a [self-hosted SFCrew](https://sfcrewai.com/self-hosted-ai-agent/). Either way you need these from Alibaba Cloud first.

1. Create a Windows Wuying cloud computer and assign it to an end user. Screen logins are issued for that user.
2. Create a RAM user and an AccessKey allowed only `ecd:DescribeDesktops`, `ecd:StartDesktops`, `ecd:StopDesktops` and `appstream-center:GetAuthCode`.
3. Get the desktop's MCP gateway URL, which must be public HTTPS, and its bearer token.
4. If you self-host, fetch the Wuying Web SDK once before building the web app: `node scripts/wuying-web-sdk.mjs`.
5. Open Settings → Computer and choose Wuying. Admins set it for the deployment under New computers run on, or for themselves under My computers; other accounts see only their own choice. Fill in the desktop ID, end user ID, region (default `cn-hangzhou`), AccessKey ID and secret, MCP gateway URL and token, then Save.
6. SFCrew checks that the AccessKey can see the desktop and that the gateway answers before saving anything. Your next Team Computer starts on the Wuying desktop.

## Setting it up with environment variables

An admin can instead set `SANDBOX_PROVIDER=wuying` on the API and worker with `WUYING_ACCESS_KEY_ID`, `WUYING_ACCESS_KEY_SECRET`, `WUYING_DESKTOP_ID`, `WUYING_END_USER_ID`, `WUYING_MCP_URL`, `WUYING_MCP_TOKEN` and optionally `WUYING_REGION_ID`. A connection saved in Settings takes precedence.

The [Wuying setup guide](https://github.com/Isuhail29/sfcrew-ai/blob/main/docs/wuying-computers.md) and the [computer providers guide](https://sfcrewai.com/docs/self-host-sandbox-providers/) have the details and troubleshooting.

## FAQ

### Can an AI agent use a Windows cloud computer?

Yes. With SFCrew, bots can work on a Wuying Windows desktop: they run PowerShell, use files and Windows apps, and you can watch and take over the screen.

### Is this Alibaba Cloud AgentBay?

No. SFCrew uses a Wuying cloud computer you already have, not the AgentBay sandbox service.

### Do I need to be an admin to use Wuying with SFCrew?

No. Any account can connect its own Wuying desktop in Settings → Computer for its Team Computers. Only an admin can make Wuying the default for the whole deployment.

### Is a shared Wuying desktop isolated between bots?

Only by folder. Each bot computer has its own home folder, but everyone on the desktop shares one Windows account, so they can reach each other's files and logins. Give each person their own desktop if that matters.

## More sandboxes for AI agents

- [Compare all sandboxes](https://sfcrewai.com/sandboxes/)
- [Boat](https://sfcrewai.com/sandboxes/boat/): Many bots with separate logins
- [E2B](https://sfcrewai.com/sandboxes/e2b/): Public or multi-user deployments
- [Daytona](https://sfcrewai.com/sandboxes/daytona/): Teams already on Daytona
- [Novita](https://sfcrewai.com/sandboxes/novita/): Bots that pick up where they left off
- [Railway](https://sfcrewai.com/sandboxes/railway/): Running everything in one Railway account
- [Docker](https://sfcrewai.com/sandboxes/docker/): Self-hosting with no cloud account
- [Kubernetes](https://sfcrewai.com/sandboxes/kubernetes/): Teams that already run Kubernetes
- [Your computer](https://sfcrewai.com/sandboxes/your-computer/): Bots that need your real apps and logins

## Sources

- [Alibaba Cloud Elastic Desktop Service](https://www.alibabacloud.com/en/product/cloud-desktop)
- [无影云电脑](https://www.aliyun.com/product/ecs/gws)
- [SFCrew, Wuying setup](https://github.com/Isuhail29/sfcrew-ai/blob/main/docs/wuying-computers.md)
- [SFCrew, computer providers](https://github.com/Isuhail29/sfcrew-ai/blob/main/docs/self-host-sandbox-providers.md)
- [SFCrew, computer runtime and isolation](https://github.com/Isuhail29/sfcrew-ai/blob/main/docs/computer-runtime.md)
