Isolation backend: "docker" (default), "firecracker" (ADR-029, hardware-virtualized microVM — requires a host provisioned with temps firecracker setup) or "microsandbox" (ADR-050, experimental libkrun microVM — requires temps microsandbox setup). Omit for the platform default; existing clients are unaffected. Requesting an unavailable backend fails with 400 rather than silently downgrading isolation.

Root disk size in MB (Firecracker only; Docker ignores it). Omit for the platform default (1 GiB).

Create the sandbox from a snapshot (ADR-037).

Mutually exclusive with image: if both are set the request fails with 400. When set, the sandbox is created with the snapshotted filesystem rather than a base image, giving users a reproducible starting point.

The snapshot must be in ready status and belong to the calling user.

Docker image override. null uses the platform default.

Lifecycle class (ADR-036, temps-native): "ephemeral" (default) or "workspace".

A workspace is a long-lived development environment: it is still suspended after timeout_secs of inactivity, but the next exec or filesystem call wakes it transparently instead of returning 409, and nothing ever destroys it automatically. Use it for "give me a place to work on this repo"; leave it unset for throwaway sandboxes.

Node to create the sandbox on (ADR-048): a node name, a node id, or control-plane / 0 for the control plane. Omit to let Temps place it (the control plane when allowed, otherwise the allowed worker with the fewest live sandboxes). The node must be allowed by the operator's sandbox placement settings and online; otherwise the request fails with 422 — it never silently falls back to another node.

Optional preview-URL password. When set, every preview URL served for this sandbox is gated behind a login form. 8–256 characters. Omit to leave preview URLs open (the sandbox ID remains the only gate). The plaintext is never returned; only the last-4 hint is surfaced in SandboxResponse.preview_password_hint.

Create the sandbox against a temps project (temps-native). The project's connected repo and git credential seed the work dir when no explicit source is given, and the sandbox is attributed to the project so it can be listed alongside it.

Requires access to the project and git_repositories:read when Temps derives the source from the project. The same team/scope rules that gate every other project-scoped endpoint apply.

Idle timeout as sent by @vercel/sandbox (milliseconds). Converted to seconds when timeout_secs is absent.

Idle timeout in seconds (temps-native). Clamped to [60, 86400].