Sandboxes

Create a new sandbox

Creates a sandbox from a template (defaults to superserve/base when from_template is omitted), or from a saved snapshot named by from_snapshot. When the request returns successfully, the sandbox is ready to use — you can run commands against it immediately.

New sandboxes use strict preview routing: only ports explicitly published through /sandboxes/{sandbox_id}/preview-ports are reachable. preview_access defaults newly published ports to public or private; each publication may override that default independently.

POST

sandboxes

curl --request POST \
  --url https://api.superserve.ai/sandboxes \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "name": "<string>",
  "from_template": "<string>",
  "from_snapshot": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "timeout_seconds": 302400,
  "idle_timeout_seconds": 302430,
  "auto_delete_seconds": 1296000,
  "metadata": {
    "env": "prod",
    "owner": "agent-7"
  },
  "env_vars": {
    "OPENAI_API_KEY": "sk-...",
    "DEBUG": "1",
    "run_id": "7f3c-21"
  },
  "network": {
    "allow_out": [
      "api.openai.com",
      "*.github.com",
      "8.8.8.8/32"
    ],
    "deny_out": [
      "0.0.0.0/0"
    ]
  },
  "secrets": {
    "ANTHROPIC_API_KEY": "anthropic-prod",
    "GITHUB_TOKEN": "ghp-readonly"
  },
  "preview_access": "public"
}
'

import requests

url = "https://api.superserve.ai/sandboxes"

payload = {
    "name": "<string>",
    "from_template": "<string>",
    "from_snapshot": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timeout_seconds": 302400,
    "idle_timeout_seconds": 302430,
    "auto_delete_seconds": 1296000,
    "metadata": {
        "env": "prod",
        "owner": "agent-7"
    },
    "env_vars": {
        "OPENAI_API_KEY": "sk-...",
        "DEBUG": "1",
        "run_id": "7f3c-21"
    },
    "network": {
        "allow_out": ["api.openai.com", "*.github.com", "8.8.8.8/32"],
        "deny_out": ["0.0.0.0/0"]
    },
    "secrets": {
        "ANTHROPIC_API_KEY": "anthropic-prod",
        "GITHUB_TOKEN": "ghp-readonly"
    },
    "preview_access": "public"
}
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    from_template: '<string>',
    from_snapshot: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    timeout_seconds: 302400,
    idle_timeout_seconds: 302430,
    auto_delete_seconds: 1296000,
    metadata: {env: 'prod', owner: 'agent-7'},
    env_vars: {OPENAI_API_KEY: 'sk-...', DEBUG: '1', run_id: '7f3c-21'},
    network: {
      allow_out: ['api.openai.com', '*.github.com', '8.8.8.8/32'],
      deny_out: ['0.0.0.0/0']
    },
    secrets: {ANTHROPIC_API_KEY: 'anthropic-prod', GITHUB_TOKEN: 'ghp-readonly'},
    preview_access: 'public'
  })
};

fetch('https://api.superserve.ai/sandboxes', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.superserve.ai/sandboxes",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'from_template' => '<string>',
    'from_snapshot' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'timeout_seconds' => 302400,
    'idle_timeout_seconds' => 302430,
    'auto_delete_seconds' => 1296000,
    'metadata' => [
        'env' => 'prod',
        'owner' => 'agent-7'
    ],
    'env_vars' => [
        'OPENAI_API_KEY' => 'sk-...',
        'DEBUG' => '1',
        'run_id' => '7f3c-21'
    ],
    'network' => [
        'allow_out' => [
                'api.openai.com',
                '*.github.com',
                '8.8.8.8/32'
        ],
        'deny_out' => [
                '0.0.0.0/0'
        ]
    ],
    'secrets' => [
        'ANTHROPIC_API_KEY' => 'anthropic-prod',
        'GITHUB_TOKEN' => 'ghp-readonly'
    ],
    'preview_access' => 'public'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.superserve.ai/sandboxes"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.superserve.ai/sandboxes")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.superserve.ai/sandboxes")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "<string>",
  "name": "<string>",
  "status": "active",
  "vcpu_count": 123,
  "memory_mib": 123,
  "snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "source_snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "created_at": "2023-11-07T05:31:56Z",
  "timeout_seconds": 123,
  "idle_timeout_seconds": 123,
  "auto_delete_seconds": 123,
  "auto_delete_at": "2023-11-07T05:31:56Z",
  "network": {
    "allow_out": [
      "api.openai.com",
      "*.github.com",
      "8.8.8.8/32"
    ],
    "deny_out": [
      "0.0.0.0/0"
    ]
  },
  "metadata": {
    "env": "prod",
    "owner": "agent-7"
  },
  "preview_access": "legacy_public",
  "routing_hint": "<string>",
  "access_token": "<string>",
  "secrets": [
    {
      "env_key": "<string>",
      "secret_name": "<string>",
      "revoked": false
    }
  ]
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

Authorizations

X-API-Key

string

header

required

Body

application/json

name

string

required

Human-readable name for the sandbox.

Required string length: 1 - 64

from_template

string

Boot the sandbox from a template. Accepts either a template UUID or a name (e.g. superserve/base, superserve/python-3.11, superserve/node-22, or a team-owned name like my-python-env). The template must be owned by the caller's team OR be a curated system template (curated templates use the superserve/ name prefix). The template's vCPU, memory, and disk values are inherited by the sandbox — they cannot be overridden per-sandbox because the snapshot dictates VM shape. When omitted, defaults to superserve/base.

from_snapshot

string<uuid>

Create the sandbox from a saved snapshot instead of a template. It starts with the snapshot's memory and disk, so what was running when the snapshot was taken carries on, on the host holding the snapshot. The snapshot must be ready and the caller's. vCPU, memory and disk are the snapshot's; timeout_seconds and network are too unless the request sets them, and the network rules are in place before anything in the sandbox runs. Commands run in the new sandbox see the environment the source had, with env_vars and the secrets set on top. Secrets the source was bound to are bound again with fresh proxy tokens, except env keys the request sets itself. Processes that were running when the snapshot was taken keep the environment they started with, including the source's secret proxy credentials, which do not work in the new sandbox: restart them to use its secrets. Mutually exclusive with from_template.

timeout_seconds

integer<int32>

Optional auto-pause timeout in seconds. The sandbox is paused once its current active session has run this long; each resume starts a fresh window. When unset, the sandbox stays active until explicitly paused. Also settable later via PATCH /sandboxes/{sandbox_id}. Maximum 604800 (7 days).

Required range: 1 <= x <= 604800

idle_timeout_seconds

integer<int32>

Optional idle timeout in seconds. The sandbox is paused after this many seconds with no activity: no command, file transfer or listing, desktop action or saved-snapshot capture, no open connection such as a terminal or command stream, and no preview traffic. A command still running counts as activity; changes to the sandbox's settings do not. The sandbox is paused shortly after the timeout. When unset (the default), the sandbox is never paused for being idle. Independent of timeout_seconds. Also settable later via PATCH /sandboxes/{sandbox_id}. Minimum 60, maximum 604800 (7 days).

Required range: 60 <= x <= 604800

auto_delete_seconds

integer<int32>

Optional garbage-collection window for paused sandboxes, in seconds. Once the sandbox has been continuously paused for this long it is deleted automatically. The window arms each time the sandbox pauses and is cancelled by resume, so a sandbox in use is never eligible. 0 deletes the sandbox as soon as it pauses. When unset, paused sandboxes are kept until explicitly deleted. Also settable later via PATCH /sandboxes/{sandbox_id}. Maximum 2592000 (30 days).

Required range: 0 <= x <= 2592000

metadata

object

Flat string-to-string tags attached to the sandbox at creation. Useful for grouping, owner labels, environment, run IDs, etc.

Constraints

Strings only. Values must be strings. There is no type coercion: metadata.count=42 filters for the string "42".
At most 64 keys.
Each key may be at most 256 bytes.
Each value may be at most 2048 bytes (2 KB).
The serialized object may be at most 16384 bytes (16 KB) in total.
Keys starting with superserve. or _superserve (case- insensitive) are reserved for platform use and rejected.

Metadata can be updated after creation via PATCH /sandboxes/:id. Filter sandboxes by metadata via the metadata.{key} query parameter on GET /sandboxes.

Show child attributes

Example:

{ "env": "prod", "owner": "agent-7" }

env_vars

object

Environment variables injected into every process inside the sandbox (terminal sessions, exec calls). Merged on top of any defaults set by the template's env build steps — caller keys win on conflict. Survive pause/resume.

Show child attributes

Example:

{
  "OPENAI_API_KEY": "sk-...",
  "DEBUG": "1",
  "run_id": "7f3c-21"
}

network

object

Egress network rules for a sandbox. allow_out accepts CIDRs (e.g. 8.8.8.8/32) and domain names (e.g. api.openai.com, *.github.com). deny_out accepts CIDRs only. Private ranges (10/8, 172.16/12, 192.168/16, 127/8, 169.254/16) are always blocked regardless of rules.

Show child attributes

secrets

object

Bind team-stored credentials to environment variables inside the sandbox. Keys are env-var names; values are secret names from POST /secrets. The agent never sees the real value: it sees a proxy token in env, and the in-host enforcement daemon swaps the token for the real credential at egress.

Show child attributes

Example:

{
  "ANTHROPIC_API_KEY": "anthropic-prod",
  "GITHUB_TOKEN": "ghp-readonly"
}

preview_access

enum<string>

default:public

Default access for newly published preview ports. New sandboxes default to public; private ports stay closed with 401 until preview-token authentication is introduced. Both modes are strict: only explicitly published ports are reachable. legacy_public is reserved for sandboxes created before explicit publication and cannot be selected through the API.

Available options:

public,

private

Response

Sandbox created

Single-sandbox shape — SandboxListItem plus access_token and bound secrets.

string

Public sandbox ID: a bare UUID, or the region-tagged form sb-<region>-<uuid> (e.g. sb-use-1b4e28ba-…). Treat as an opaque string; the tagged form routes the request to the sandbox's home region. Endpoints accept both forms interchangeably.

Pattern: ^(sb-[a-z0-9]+-)?[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

name

string

status

enum<string>

Current state of the sandbox. active means running; paused means paused and awaiting resume. pausing, resuming and migrating are transient states observed while the platform pauses, restores, or relocates a sandbox (e.g. after a 202 from /pause, or auto-resume on /exec); clients should poll or retry shortly. failed means the sandbox can no longer be resumed.

Available options:

active,

pausing,

paused,

resuming,

migrating,

failed

vcpu_count

integer

memory_mib

integer

snapshot_id

string<uuid>

ID of the latest snapshot (present after a pause).

source_snapshot_id

string<uuid>

The saved snapshot the sandbox was created from, when it was.

created_at

string<date-time>

timeout_seconds

integer<int32>

Auto-pause timeout in seconds, if configured. Absent when auto-pause is disabled.

idle_timeout_seconds

integer<int32>

Idle timeout in seconds, if configured. Absent when the sandbox is never paused for being idle.

auto_delete_seconds

integer<int32>

Garbage-collection window for the paused state, if configured. Absent when auto-delete is disabled.

auto_delete_at

string<date-time>

When the sandbox will be deleted. Present only while the sandbox is paused with auto_delete_seconds configured. The deadline is armed when the sandbox pauses (or when the setting is applied to an already-paused sandbox) and cleared on resume.

network

object

Current egress allow/deny rules, if any have been configured. Absent when the sandbox uses default network settings.

Show child attributes

metadata

object

User-supplied tags attached at creation. Always present — sandboxes created without metadata return {} rather than being absent.

Show child attributes

Example:

{ "env": "prod", "owner": "agent-7" }

preview_access

enum<string>

Default access for newly published ports. public and private are strict modes; existing published rows keep their own access. legacy_public may be returned for an older sandbox and preserves all-port behavior until updated to a strict mode.

Available options:

legacy_public,

public,

private

routing_hint

string

Optional signed logical-owner routing hint. Send on data-plane requests as X-Superserve-Routing-Hint, or as a route. WebSocket subprotocol alongside the unchanged access token. Refresh after resume/activate; absent or invalid hints retain ownership lookup fallback. This does not authorize access.

access_token

string

Per-sandbox access token for data-plane operations (file upload/download, terminal). Pass as the X-Access-Token header.

secrets

object[]

Credentials bound to this sandbox. Each entry maps an env-var name visible to the agent to the secret name it resolves to. revoked=true when the underlying secret has been soft-deleted (the env var still holds the now-useless proxy token).

Show child attributes

⌘I

Create a new sandbox

curl --request POST \
  --url https://api.superserve.ai/sandboxes \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "name": "<string>",
  "from_template": "<string>",
  "from_snapshot": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "timeout_seconds": 302400,
  "idle_timeout_seconds": 302430,
  "auto_delete_seconds": 1296000,
  "metadata": {
    "env": "prod",
    "owner": "agent-7"
  },
  "env_vars": {
    "OPENAI_API_KEY": "sk-...",
    "DEBUG": "1",
    "run_id": "7f3c-21"
  },
  "network": {
    "allow_out": [
      "api.openai.com",
      "*.github.com",
      "8.8.8.8/32"
    ],
    "deny_out": [
      "0.0.0.0/0"
    ]
  },
  "secrets": {
    "ANTHROPIC_API_KEY": "anthropic-prod",
    "GITHUB_TOKEN": "ghp-readonly"
  },
  "preview_access": "public"
}
'

import requests

url = "https://api.superserve.ai/sandboxes"

payload = {
    "name": "<string>",
    "from_template": "<string>",
    "from_snapshot": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timeout_seconds": 302400,
    "idle_timeout_seconds": 302430,
    "auto_delete_seconds": 1296000,
    "metadata": {
        "env": "prod",
        "owner": "agent-7"
    },
    "env_vars": {
        "OPENAI_API_KEY": "sk-...",
        "DEBUG": "1",
        "run_id": "7f3c-21"
    },
    "network": {
        "allow_out": ["api.openai.com", "*.github.com", "8.8.8.8/32"],
        "deny_out": ["0.0.0.0/0"]
    },
    "secrets": {
        "ANTHROPIC_API_KEY": "anthropic-prod",
        "GITHUB_TOKEN": "ghp-readonly"
    },
    "preview_access": "public"
}
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    name: '<string>',
    from_template: '<string>',
    from_snapshot: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    timeout_seconds: 302400,
    idle_timeout_seconds: 302430,
    auto_delete_seconds: 1296000,
    metadata: {env: 'prod', owner: 'agent-7'},
    env_vars: {OPENAI_API_KEY: 'sk-...', DEBUG: '1', run_id: '7f3c-21'},
    network: {
      allow_out: ['api.openai.com', '*.github.com', '8.8.8.8/32'],
      deny_out: ['0.0.0.0/0']
    },
    secrets: {ANTHROPIC_API_KEY: 'anthropic-prod', GITHUB_TOKEN: 'ghp-readonly'},
    preview_access: 'public'
  })
};

fetch('https://api.superserve.ai/sandboxes', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.superserve.ai/sandboxes",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'from_template' => '<string>',
    'from_snapshot' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'timeout_seconds' => 302400,
    'idle_timeout_seconds' => 302430,
    'auto_delete_seconds' => 1296000,
    'metadata' => [
        'env' => 'prod',
        'owner' => 'agent-7'
    ],
    'env_vars' => [
        'OPENAI_API_KEY' => 'sk-...',
        'DEBUG' => '1',
        'run_id' => '7f3c-21'
    ],
    'network' => [
        'allow_out' => [
                'api.openai.com',
                '*.github.com',
                '8.8.8.8/32'
        ],
        'deny_out' => [
                '0.0.0.0/0'
        ]
    ],
    'secrets' => [
        'ANTHROPIC_API_KEY' => 'anthropic-prod',
        'GITHUB_TOKEN' => 'ghp-readonly'
    ],
    'preview_access' => 'public'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.superserve.ai/sandboxes"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.superserve.ai/sandboxes")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.superserve.ai/sandboxes")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"from_template\": \"<string>\",\n  \"from_snapshot\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"timeout_seconds\": 302400,\n  \"idle_timeout_seconds\": 302430,\n  \"auto_delete_seconds\": 1296000,\n  \"metadata\": {\n    \"env\": \"prod\",\n    \"owner\": \"agent-7\"\n  },\n  \"env_vars\": {\n    \"OPENAI_API_KEY\": \"sk-...\",\n    \"DEBUG\": \"1\",\n    \"run_id\": \"7f3c-21\"\n  },\n  \"network\": {\n    \"allow_out\": [\n      \"api.openai.com\",\n      \"*.github.com\",\n      \"8.8.8.8/32\"\n    ],\n    \"deny_out\": [\n      \"0.0.0.0/0\"\n    ]\n  },\n  \"secrets\": {\n    \"ANTHROPIC_API_KEY\": \"anthropic-prod\",\n    \"GITHUB_TOKEN\": \"ghp-readonly\"\n  },\n  \"preview_access\": \"public\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "<string>",
  "name": "<string>",
  "status": "active",
  "vcpu_count": 123,
  "memory_mib": 123,
  "snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "source_snapshot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "created_at": "2023-11-07T05:31:56Z",
  "timeout_seconds": 123,
  "idle_timeout_seconds": 123,
  "auto_delete_seconds": 123,
  "auto_delete_at": "2023-11-07T05:31:56Z",
  "network": {
    "allow_out": [
      "api.openai.com",
      "*.github.com",
      "8.8.8.8/32"
    ],
    "deny_out": [
      "0.0.0.0/0"
    ]
  },
  "metadata": {
    "env": "prod",
    "owner": "agent-7"
  },
  "preview_access": "legacy_public",
  "routing_hint": "<string>",
  "access_token": "<string>",
  "secrets": [
    {
      "env_key": "<string>",
      "secret_name": "<string>",
      "revoked": false
    }
  ]
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "action_url": "https://console.superserve.ai/plan-usage"
  }
}

Sandboxes

Snapshots

Exec

Files

Templates

Secrets

Team Management

Activity

Create a new sandbox

Authorizations

Body

Constraints

Response