A sandbox for your agent, in one API call

API=https://sandbox-as-a-service.com/v1
AUTH="Authorization: Bearer $AAS_API_KEY"
JSON="Content-Type: application/json"

# 1. Create a sandbox
SBX=$(curl -sS -X POST -H "$AUTH" -H "$JSON" \
  -d '{"size":"small"}' \
  $API/sandboxes | jq -r .id)

# 2. Run a command in it
curl -sS -X POST -H "$AUTH" -H "$JSON" \
  -d '{"command":"python3 -c \"print(6*7)\""}' \
  $API/sandboxes/$SBX/exec

# 3. Destroy it
curl -sS -X DELETE -H "$AUTH" $API/sandboxes/$SBX

import os, requests

API = "https://sandbox-as-a-service.com/v1"
headers = {"Authorization": f"Bearer {os.environ['AAS_API_KEY']}"}

# Create a sandbox
sandbox = requests.post(f"{API}/sandboxes", headers=headers,
                        json={"size": "small", "timeout_minutes": 15}).json()

# Run untrusted, model-generated code inside it
result = requests.post(f"{API}/sandboxes/{sandbox['id']}/exec", headers=headers,
                       json={"command": "python3 -c 'print(6*7)'"}).json()
print(result["stdout"])        # -> 42
print(result["exit_code"])     # -> 0

# Clean up (or let it expire on its own)
requests.delete(f"{API}/sandboxes/{sandbox['id']}", headers=headers)

const API = "https://sandbox-as-a-service.com/v1";
const headers = {
  Authorization: `Bearer ${process.env.AAS_API_KEY}`,
  "Content-Type": "application/json",
};

// Create a sandbox
const sandbox = await fetch(`${API}/sandboxes`, {
  method: "POST",
  headers,
  body: JSON.stringify({ size: "small", timeout_minutes: 15 }),
}).then((r) => r.json());

// Run untrusted, model-generated code inside it
const result = await fetch(`${API}/sandboxes/${sandbox.id}/exec`, {
  method: "POST",
  headers,
  body: JSON.stringify({ command: "node -e 'console.log(6*7)'" }),
}).then((r) => r.json());

console.log(result.stdout);    // -> 42

// Clean up (or let it expire on its own)
await fetch(`${API}/sandboxes/${sandbox.id}`, { method: "DELETE", headers });