access_policies5

ace1

agents10

alert_rules5

annotation_queues2

annotation-queues21

api-key6

audit-logs1

auth7

aws_marketplace1

backfills1

beacon1

bulk-exports11

charts23

comments6

commits3

data_planes2

datasets35

directories3

evaluators6

examples15

experiment-view-overrides5

experiments1

features5

feedback15

feedback-configs4

fleet1

fleet auth11

fleet credentials1

fleet github-app11

fleet integrations6

fleet mcp18

fleet threads10

fleet trigger-templates2

fleet triggers5

fleet usage4

fleet_webhooks1

gateway-policies5

health1

hub_environments4

info2

integrations2

internal1

issues3

issues-agent5

likes1

mcp4

mcp_vendors9

me5

metrics1

model-price-map4

nps1

oauth8

optimization-jobs9

Organizations1

orgs51

ownerships3

playground-settings5

prompt-webhooks6

prompts2

public20

repos9

run27

runs7

sandboxes17

sandboxes-internal1

SCIM Tokens5

service-accounts3

sessions1

settings2

skills5

tag-transitions1

tags5

tenant2

threads3

tools8

tracer-sessions26

TTL Settings2

ttl-settings2

usage-limits4

workspaces38

sandboxes

Get sandbox access decision

Combines authn + per-sandbox authz for runtime access. Returns the caller's PublicAuthInfo on allow (HTTP 200) or a 403 with the deny reason on deny.

get/auth/sandbox-access

Query parameters

sandbox_idstring required

Sandbox UUID

actionstring required

Runtime action: exec | file | tunnel | proxy

Response

ls_user_idstring

organization_idstring

tenant_idstring

user_emailstring

user_idstring

Changes

Changed in 1 of the 48 revisions of this API.1

May 27, 2026a0acb3a6a1011See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history