Kilo Code - Superserve

Pair Kilo Code with a Superserve sandbox to run its generated commands and file edits in an isolated VM.

Via the console

On the Secrets page, create a secret for your model provider (e.g. Anthropic) and paste your API key — you only do this once, and the key never enters the sandbox.
Go to console.superserve.ai and click Create sandbox.
Pick the superserve/node-22 template.
Under Advanced Options → Secrets, bind that secret to your provider’s key env var (e.g. ANTHROPIC_API_KEY).
Create the sandbox, open its Terminal, and install Kilo Code.

Via the SDK

npm install @superserve/sdk
export SUPERSERVE_API_KEY=ss_live_...

pip install superserve
export SUPERSERVE_API_KEY=ss_live_...

import { Sandbox, Secret } from "@superserve/sdk"

// One-time: store your key as a secret. It never enters the sandbox.
await Secret.create({
  name: "anthropic-key",
  value: "sk-ant-...",
  provider: "anthropic",
})

const sandbox = await Sandbox.create({
  name: "kilocode",
  fromTemplate: "superserve/node-22",
  secrets: { ANTHROPIC_API_KEY: "anthropic-key" },
})

await sandbox.commands.run("npm install -g @kilocode/cli")

from superserve import Sandbox, Secret

# One-time: store your key as a secret. It never enters the sandbox.
Secret.create(name="anthropic-key", value="sk-ant-...", provider="anthropic")

sandbox = Sandbox.create(
    name="kilocode",
    from_template="superserve/node-22",
    secrets={"ANTHROPIC_API_KEY": "anthropic-key"},
)

sandbox.commands.run("npm install -g @kilocode/cli")

Kilo Code reads ANTHROPIC_API_KEY as usual, but its value is a stand-in token — the real key is attached only on requests to the provider, never exposed to the agent. Open the sandbox in the console, launch the terminal, and run kilocode.

Persist sessions

await sandbox.pause()
await sandbox.resume()

Delete when finished

A paused sandbox is kept until you delete it. When you no longer need the sandbox, delete it. This also deletes its files and saved state.

await sandbox.kill()

sandbox.kill()

To delete it from another process, pass its ID to Sandbox.killById() (TypeScript) or Sandbox.kill_by_id() (Python). To delete paused sandboxes automatically, see Auto-delete.

⌘I