Agent sandboxes
Remote tools for your agent
Give an agent a remote environment for multi-step work. Sandboxes > New > Run code uses the managed tools environment when it is enabled for your team. Sandbox preview and managed templates require account admission and an available, qualified environment.
Start with your project
Use an empty project, a local folder through the SDK or CLI, a saved source asset, or a connected GitHub repository. The managed environment includes Python, Node, shell and git. Add a dependency setup command and the network permissions it needs. Custom images retain their separate configuration and admission rules. The managed tools environment is CPU-based. Submit a GPU workload for GPU code.
Execute and work with files
- Run shell commands or exact argument lists with a working directory, environment variables and command timeout.
- Stream recorded stdout and stderr, send stdin, and inspect completion and exit status. Console command examples fill the terminal before you run them.
- Browse, read, edit, upload and download files. Downloads verify contents, and replacing a file uses its current version to avoid overwriting newer work.
- Reconnect using the sandbox ID or name from the console, SDK or CLI.
Control access, usage and lifecycle
Set an explicit spending limit, resource requirements and applicable idle and lifetime controls. Grant network access to the services your tools need and use stored secret references. Live file operations can wake paid compute.
Read CPU, memory and disk measurements, the available history, costs and lifecycle events. Network observations include denied destinations and measured traffic. No-output and budget alerts help identify runs that need attention.
Sleep requests a project save and compute release. Wake requests compute again, while reconnecting attaches to the existing identity. Observe completion of those transitions. Saved files do not restore process memory. Closing a client connection alone leaves remote work running, while terminating explicitly stops future execution and starts cleanup.