GET /sandboxes/{sandboxID}
Sandbox
Get a sandbox by id
Parameters
sandboxID·string· path · required
Responses
200
Successfully returned the sandbox
Content-Type: application/json
Schema: SandboxDetail
templateID·string· requiredIdentifier of the template from which is the sandbox created
alias·string· optionalAlias of the template
sandboxID·string· requiredIdentifier of the sandbox
startedAt·string· requiredTime when the sandbox was started
Format:
date-timeendAt·string· requiredTime when the sandbox will expire
Format:
date-timeenvdVersion·EnvdVersion· requiredVersion of the envd running in the sandbox
allowInternetAccess·boolean | null· optionalWhether internet access was explicitly enabled or disabled for the sandbox. Null means it was not explicitly set.
domain·string | null· optionalBase domain where the sandbox traffic is accessible
cpuCount·CPUCount· requiredCPU cores for the sandbox
Format:
int32Minimum:
1memoryMB·MemoryMB· requiredMemory for the sandbox in MiB
Format:
int32Minimum:
128diskSizeMB·DiskSizeMB· requiredDisk size for the sandbox in MiB
Format:
int32Minimum:
0metadata·SandboxMetadata· optionalmetadata.*·string· additional propertyMetadata of the sandbox
state·SandboxState· requiredState of the sandbox
Allowed values for
SandboxState:running|pausednetwork·SandboxNetworkConfig· optionalnetwork.allowPublicTraffic·boolean· optionalSpecify if the sandbox URLs should be accessible only with authentication.
Default:
truenetwork.allowOut·array<string>· optionalList of allowed destinations for egress traffic. Each entry can be a CIDR block (e.g. "8.8.8.8/32"), a bare IP address (e.g. "8.8.8.8"), or a domain name (e.g. "example.com", "*.example.com"). Allowed entries always take precedence over denied entries.
network.denyOut·array<string>· optionalList of denied CIDR blocks or IP addresses for egress traffic. Domain names are not supported for deny rules.
network.maskRequestHost·string· optionalSpecify host mask which will be used for all sandbox requests
network.rules·object· optionalPer-domain transform rules applied to matching egress HTTP/HTTPS requests. Keys are domains (e.g. "api.example.com", "example.com"). A domain listed here is not automatically allowed - use allowOut to permit the traffic.
network.rules.*·array<SandboxNetworkRule>· additional propertynetwork.rules.*.transform·SandboxNetworkTransform· optionalTransformations applied to matching egress requests before forwarding.
network.rules.*.transform.headers·object· optionalHTTP headers to inject or override in matching requests. An existing header with the same name is replaced. Values are plain strings; secret resolution happens client-side before sending to the API.
network.rules.*.transform.headers.*·string· additional propertylifecycle·SandboxLifecycle· optionalSandbox lifecycle policy returned by sandbox info.
lifecycle.autoResume·boolean· requiredWhether the sandbox can auto-resume.
lifecycle.onTimeout·SandboxOnTimeout· requiredAction taken when the sandbox times out.
Allowed values for
SandboxOnTimeout:kill|pause
404
Not found
Content-Type: application/json
Schema: Error
code·integer· requiredError code
Format:
int32message·string· requiredError
401
Authentication error
Content-Type: application/json
Schema: Error
code·integer· requiredError code
Format:
int32message·string· requiredError
500
Server error
Content-Type: application/json
Schema: Error
code·integer· requiredError code
Format:
int32message·string· requiredError