Quickstart
-
Install skill (optional)
Terminal window npx skills add rivet-dev/skills -s sandbox-agentTerminal window bunx skills add rivet-dev/skills -s sandbox-agent -
Set environment variables
Each coding agent requires API keys to connect to their respective LLM providers.
Terminal window export ANTHROPIC_API_KEY="sk-ant-..."export OPENAI_API_KEY="sk-..."import { Sandbox } from "@e2b/code-interpreter";const envs: Record<string, string> = {};if (process.env.ANTHROPIC_API_KEY) envs.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;if (process.env.OPENAI_API_KEY) envs.OPENAI_API_KEY = process.env.OPENAI_API_KEY;const sandbox = await Sandbox.create({ envs });import { Daytona } from "@daytonaio/sdk";const envVars: Record<string, string> = {};if (process.env.ANTHROPIC_API_KEY) envVars.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;if (process.env.OPENAI_API_KEY) envVars.OPENAI_API_KEY = process.env.OPENAI_API_KEY;const daytona = new Daytona();const sandbox = await daytona.create({snapshot: "sandbox-agent-ready",envVars,});Terminal window docker run -p 2468:2468 \-e ANTHROPIC_API_KEY="sk-ant-..." \-e OPENAI_API_KEY="sk-..." \rivetdev/sandbox-agent:0.4.2-full \server --no-token --host 0.0.0.0 --port 2468Extracting API keys from current machine
Use
sandbox-agent credentials extract-env --exportto extract your existing API keys (Anthropic, OpenAI, etc.) from local Claude Code or Codex config files.Testing without API keys
Use the
mockagent for SDK and integration testing without provider credentials.Multi-tenant and per-user billing
For per-tenant token tracking, budget enforcement, or usage-based billing, see LLM Credentials for gateway options like OpenRouter, LiteLLM, and Portkey.
-
Run the server
Install and run the binary directly.
Terminal window curl -fsSL https://releases.rivet.dev/sandbox-agent/0.4.x/install.sh | shsandbox-agent server --no-token --host 0.0.0.0 --port 2468Run without installing globally.
Terminal window Run without installing globally.
Terminal window Install globally, then run.
Terminal window sandbox-agent server --no-token --host 0.0.0.0 --port 2468Install globally, then run.
Terminal window # Allow Bun to run postinstall scripts for native binaries (required for SandboxAgent.start()).bun pm -g trust @sandbox-agent/cli-linux-x64 @sandbox-agent/cli-linux-arm64 @sandbox-agent/cli-darwin-arm64 @sandbox-agent/cli-darwin-x64 @sandbox-agent/cli-win32-x64sandbox-agent server --no-token --host 0.0.0.0 --port 2468For local development, use
SandboxAgent.start()to spawn and manage the server as a subprocess.Terminal window import { SandboxAgent } from "sandbox-agent";const sdk = await SandboxAgent.start();For local development, use
SandboxAgent.start()to spawn and manage the server as a subprocess.Terminal window # Allow Bun to run postinstall scripts for native binaries (required for SandboxAgent.start()).bun pm trust @sandbox-agent/cli-linux-x64 @sandbox-agent/cli-linux-arm64 @sandbox-agent/cli-darwin-arm64 @sandbox-agent/cli-darwin-x64 @sandbox-agent/cli-win32-x64import { SandboxAgent } from "sandbox-agent";const sdk = await SandboxAgent.start();If you’re running from source instead of the installed CLI.
Terminal window cargo run -p sandbox-agent -- server --no-token --host 0.0.0.0 --port 2468Binding to
0.0.0.0allows the server to accept connections from any network interface, which is required when running inside a sandbox where clients connect remotely.Configuring token
Tokens are usually not required. Most sandbox providers (E2B, Daytona, etc.) already secure networking at the infrastructure layer.
If you expose the server publicly, use
--token "$SANDBOX_TOKEN"to require authentication:Terminal window sandbox-agent server --token "$SANDBOX_TOKEN" --host 0.0.0.0 --port 2468Then pass the token when connecting:
import { SandboxAgent } from "sandbox-agent";const sdk = await SandboxAgent.connect({baseUrl: "http://your-server:2468",token: process.env.SANDBOX_TOKEN,});Terminal window curl "http://your-server:2468/v1/health" \-H "Authorization: Bearer $SANDBOX_TOKEN"Terminal window sandbox-agent --token "$SANDBOX_TOKEN" api agents list \--endpoint http://your-server:2468CORS
If you’re calling the server from a browser, see the CORS configuration guide.
-
Install agents (optional)
To preinstall agents:
Terminal window sandbox-agent install-agent --allIf agents are not installed up front, they are lazily installed when creating a session.
-
Install desktop dependencies (optional, Linux only)
If you want to use
/v1/desktop/*, install the desktop runtime packages first:Terminal window sandbox-agent install desktop --yesThen use
GET /v1/desktop/statusorsdk.getDesktopStatus()to verify the runtime is ready before calling desktop screenshot or input APIs. -
Create a session
import { SandboxAgent } from "sandbox-agent";const sdk = await SandboxAgent.connect({baseUrl: "http://127.0.0.1:2468",});const session = await sdk.createSession({agent: "claude",sessionInit: {cwd: "/",mcpServers: [],},});console.log(session.id); -
Send a message
const result = await session.prompt([{ type: "text", text: "Summarize the repository and suggest next steps." },]);console.log(result.stopReason); -
Read events
const off = session.onEvent((event) => {console.log(event.sender, event.payload);});const page = await sdk.getEvents({sessionId: session.id,limit: 50,});console.log(page.items.length);off(); -
Test with Inspector
Open the Inspector UI at
/ui/on your server (for example,http://localhost:2468/ui/) to inspect sessions and events in a GUI.