---
title: "Resolve or record the current agent sandbox allocation"
method: POST
path: "/api/v1/clawder/organizations/{organization_id}/sandbox"
tags: ["clawder"]
---

# Resolve or record the current agent sandbox allocation

`POST /api/v1/clawder/organizations/{organization_id}/sandbox`

## Request

- Base URL: `https://composal.com` (the document declares no server; this is the origin it was published from)
- URL: `https://composal.com/api/v1/clawder/organizations/{organization_id}/sandbox`
- Auth: HTTP bearer

Private tenant worker transport. Provider credentials are never returned to browser sessions or personal API tokens. Resolve reads configuration, claim admits at most one allocation creator, and complete records the provider receipt.

## Path parameters

- `organization_id` string, required

## Request body

- union
  - object
    - `native_agent_id` string, required
    - `operation` 'resolve', required
    - `generation` integer
    - `allocation_token` string
    - `remote_id` string
  - object
    - `native_agent_id` string, required
    - `operation` 'claim', required
    - `generation` integer, required
    - `allocation_token` string
    - `remote_id` string
  - object
    - `native_agent_id` string, required
    - `operation` 'complete', required
    - `generation` integer, required
    - `allocation_token` string, required
    - `remote_id` string, required

## Response `200`

Current sandbox authority and private provider configuration

- object
  - `integration_id` string, nullable, required
  - `generation` integer, required
  - `status` string, required
  - `provider` string, required
  - `workspace_key` string, required
  - `remote_id` string, nullable, required
  - `account_id` string, nullable, required
  - `credentials` object, nullable, required
  - `configuration` object, required
  - `allocation_token` string, nullable
  - `may_create` boolean

## Other responses

- `401`: Invalid tenant bridge credential
- `403`: Revoked runtime authority
- `404`: Unknown organization or native agent
- `409`: Disconnected or superseded sandbox selection
- `422`: Invalid sandbox request

---

[API](https://skmtc.dev/composal/apis/vex-api.md) - [All operations](https://skmtc.dev/composal/apis/vex-api/llms.txt) - [OpenAPI document](https://skmtc.dev/composal/apis/vex-api/revisions/74298a24e040?raw)