All features
Everything a sandbox can do, under the five pillars. Each line opens its write-up.
Execution
A shell, a browser and a screen, over HTTP.
- Commands and filesRun anything as root: wait for it, stream it, or leave it running. Read and write files the same way.
- SchedulesA command every hour, or at 07:00 on weekdays. A stopped sandbox is started for the run and stopped after.
- One commandFrom nothing to a shell in a new sandbox, signed in through your browser, with no key to paste.
- Languages and toolsPython, Node, Go, Rust, Java, nine coding agents and two assistants are in the image, ready on the first command.
- BrowserA Chromium made to look like an ordinary browser, and playwright-cli, with nothing to set up.
- DesktopTurn on a screen, watch it in a tab, and let a model click and type on it.
- Agent skillsSkills that teach your agent the whole API, and move your repository into a sandbox.
Persistence
Stop it, and the whole disk is kept.
- Stop and resumeStop it for the night. The same sandbox, under the same id, starts in the morning.
- Snapshots and forksKeep the disk before a risky step, roll back, or fork to try two ways at once.
- Templates and secretsMake every sandbox the same way: its size, its image, its secrets. A template costs nothing.
Connectivity
Ways in for people, mail, and events out.
- SSHLog in as root at a port of its own, with the host key from the API.
- Public URLsGive a port an HTTPS address that anyone with the link can open.
- EmailA mail domain for every sandbox, at $0.50 per 1,000 messages.
- WebhooksEvery start, stop and failure pushed to your server, signed.
- OpenTelemetry ↗Written up under Observability.
Observability
What each sandbox uses, and what it costs.
- MetricsCPU, memory, disk and network, read each minute from outside the machine and kept 15 days.
- UsageThe bill by sandbox, by key, by day and by hour, counted by the second.
- OpenTelemetryReadings and events sent to the collector you already use: Datadog, Grafana Cloud, Honeycomb or your own.
- Tags and metadataSay what each sandbox is for, and find a run's sandboxes in one call.
- ConsoleEvery sandbox, by hand, in your browser: start it, stop it, run a command, see what it uses.
- Webhooks ↗Written up under Connectivity.
Security
Keys, allowlists, and no runaway machines.
- Outbound rulesDecide what it may reach, held outside the machine where root cannot change it.
- Secrets kept outIts commands see a stand-in. The real key is put in only on HTTPS requests to the hosts you name.
- API keysA key for each agent that can do only its job: some actions, some sandboxes, a last day, and the addresses it may be used from.
- RetriesA retried create returns the same sandbox, never a second one.
- Templates and secrets ↗Written up under Persistence.
The five pillars
All features, on one page→Give your agent somewhere to work.
Free to start, with +$10 credit.