A real computer that your agent drives over HTTP.
Each agent gets its own Linux machine with a shell, a browser and a screen. A real computer, ready for any task.
Run anything, and watch it run.
A command goes in as a list of arguments and comes back with its exit code, stdout and stderr.
- Wait up to 90 seconds for a command, stream its output as it runs, or leave it running for up to 10 minutes.
- Start servers and long builds in the background, and read them back by id.
- Read and write files over the same API.
- Commands run as root, so installing packages and starting containers need nothing more.
- The secrets of the sandbox's template reach every command as variables and files.
Run it every hour. Pay for the minutes it runs.
Give a sandbox a command and a schedule. When it is stopped, a run starts it, runs the command, and stops it again, keeping its disk.
- Every few minutes, hours or days, or a cron expression in your time zone.
- The whole machine for each run: its disk, its packages, its browser and its secrets.
- Each run's exit code and output are kept, and a webhook says when one fails.
- A run that finds someone using the sandbox leaves it running.
- An agent can schedule its own follow-up: check the deploy at nine, retry the scrape every six hours.
From nothing to a shell, in one command.
One command signs you in through your browser, installs the agental command and your agents' skills, and opens a shell in a new sandbox.
- The browser asks you to allow your computer, and the command gets an API key of its own, named for it. Delete the key in the console and it is signed out.
- The SDKs use the same sign-in, so a script on your computer needs no key either.
- Run by an agent, it makes the sandbox and prints the commands to use it with, instead of opening a shell.
Everything an agent reaches for, already there.
Every sandbox starts with the languages, build tools and coding agents a task asks for first, so its first command does the work and not the setup.
- Python 3.12 with pip and uv, and Node.js 24 with npm, pnpm, bun and deno.
- Go 1.27, Rust 1.99, Java 21 with Maven and Gradle, Ruby 3.2, PHP 8.3, and GCC with CMake.
- Docker with Compose and BuildKit, git, the GitHub CLI, ripgrep, jq and ffmpeg.
- Claude Code, Codex, opencode, Gemini CLI, pi, Cursor, Prime Agent, Kimi Code and Mistral Vibe, each signed in with your own key and told it is on an agental sandbox, so a prompt starts with the task.
- The assistants OpenClaw and Hermes, which you talk to from a chat app, with their gateways off until you start one.
- Root, so anything else is one apt-get away, and a snapshot keeps it for the next sandbox.
- About half of even the tiny size's 20 GiB disk, and most of every larger size's, is left for your work.
A browser in every sandbox.
A Chromium made to show as a browser on an ordinary computer is in the image, with the command-line tools agents drive it with. There is nothing to install.
- BetterChromium in Chrome's place, a Chromium made to show as a browser on an ordinary computer does. It runs without a window unless a desktop is on.
- playwright-cli opens pages, clicks, types and takes pictures, and writes what it reads to a file instead of printing a whole page.
- Turn it on to be driven from outside, and your own Playwright, Puppeteer, browser-use or Stagehand connects to it from your computer, at an address of its own.
- It runs on the sandbox's own CPU and memory, so there is no charge by the browser-hour.
- Its cookies and logins are kept on the sandbox's disk, through a stop and a start.
- The address asks for no login, so keep it as you would a password. Turned off, it leads nowhere.
- Fonts for Latin, Chinese, Japanese, Korean and emoji, so a screenshot or a PDF is drawn as it would be elsewhere.
1043 · Halden & Co · due 2 Nov
1044 · Oberlin GmbH · draft
A desktop you can watch.
Turn the desktop on and the sandbox has a screen. Programs open windows on it, and you watch it in a browser tab.
- An Xfce desktop, 1280 by 800 unless you ask for another size.
- Chrome with a window, or any program that needs one: set DISPLAY to :0.
- An agent takes a picture of the screen, then clicks, scrolls, types and presses keys, one call each: the actions a model's computer tool asks for.
- A picture can be a JPEG, of a part of the screen, made smaller, so a model reads fewer tokens. Long text is put on the clipboard and pasted at once.
- Its address is hard to guess and asks for no login, so keep it as you would a password. Turned off, it leads nowhere.
- To show someone the screen, give them a link of its own: to watch only, which takes no click or key at the machine, or to use it, for ten minutes or as long as you say.
- It stays on through a stop and a start, and comes back with nothing open on it.

Your agent can read the docs for you.
One command gives the agent on your computer two skills: the brief, which teaches it to create a machine, work in it, handle every error and put it away, and one that moves the repository it is working in, uncommitted work and all, into a sandbox.
- They work in Claude Code, Codex, Cursor and opencode, and Claude Code can also take them as a plugin.
- A few lines in AGENTS.md or CLAUDE.md send every build, test and Docker run to a sandbox, so none of it runs on your computer.
- They are written for this deployment, with its sizes, its limits and its addresses, and an update brings the brief as it is that day.
- The whole API is also published as OpenAPI 3.1.
Run every build, test and Docker command in an agental
sandbox, never on this computer. Use the agental skill.
The five pillars
All features, on one page→Give your agent somewhere to work.
Free to start, with +$10 credit.