Appearance
Agent Environments
Templates are ready-to-run images. Create a sandbox with a template id and the environment is on the PATH — no Dockerfile, no npm install, no waiting for a base layer to warm up.
python
sandbox = client.sandboxes.create(
template="claude-code",
env={"ANTHROPIC_API_KEY": key},
)
result = sandbox.run('claude "refactor the auth module"')List what your account can see with client.templates.list() or GET /sandboxes/templates.
Coding agents
| Template | CLI | Auth (via env) |
|---|---|---|
claude-code | Claude Code | ANTHROPIC_AUTH_TOKEN or ANTHROPIC_API_KEY |
codex | OpenAI Codex | OPENAI_API_KEY; endpoint/model via OPENAI_BASE_URL / OPENAI_MODEL |
gemini-cli | Gemini CLI | GEMINI_API_KEY; endpoint/model via GEMINI_BASE_URL / GEMINI_MODEL |
deepseek-harness | DeepSeek Harness (dsh) | DEEPSEEK_API_KEY |
qwen-code | Qwen Code | OPENAI_API_KEY; endpoint/model via OPENAI_BASE_URL / OPENAI_MODEL |
kimi-cli | Kimi CLI (Moonshot) | KIMI_API_KEY; endpoint/model via KIMI_BASE_URL / KIMI_MODEL_NAME |
Agent CLIs are version-pinned per template release.
Compute
| Template | What you get |
|---|---|
python | Python 3.12 for scripts and notebooks |
node | Node.js 22 for JavaScript and TypeScript workloads |
ubuntu | Bare Ubuntu 22.04 with a shell |
code-interpreter | Jupyter-style interpreter with execd; use the stateful code API |
Browser
| Template | What you get |
|---|---|
playwright | Headless Chromium driven by Playwright |
chrome | Chromium with VNC and remote DevTools on port 9222 |
Desktop
| Template | What you get |
|---|---|
vscode | code-server (VS Code in the browser) and its toolchain |
desktop | XFCE with Xvfb, x11vnc and noVNC preinstalled |
Both serve their UI over WebSockets, which public endpoints do not carry yet, so today you drive them from inside the sandbox. See VS Code and Desktop.
Expose ports publicly from the console's endpoint panel or GET /sandboxes/{id}/endpoints/{port} — HTTP today, WebSockets once the ingress gateway ships.
Start-up time
Agent templates resolve to prebuilt images, so the CLI is already on the PATH when the sandbox reports Running — there is no install step to wait through.
Passing secrets
Prefer not to hand long-lived provider keys through env where you can bind them at the network boundary instead — see Secrets & Credential Vault. Today that path is not available yet; env injection is the supported default.