List a session's sandboxes
GET
/v1/sessions/{session_id}/sandboxesAuthorization
AuthorizationBearer token · headerrequiredPath parameters
session_idstring<uuid>requiredSession id
Responses
200Every sandbox the session's agent grants, in name order. The list is whole: an agent grants a bounded set, so nothing pages.
itemsSessionSandboxBody[]requiredShow propertiesHide properties
Array of
SessionSandboxBodyarchive_bytesinteger<int64> | nullSize of the last published snapshot, which can predate the latest exec.
Null means no archive is available, regardless of status.
archive_refused_bytesinteger<int64> | nullWhat the workspace packed to when a backup was last refused for
exceeding this sandbox's archive bound; cleared by the next archive
that lands. It distinguishes a workspace too large to save from one
that was never backed up, which both report a null `archive_bytes`.
classstringrequiredcreated_atstring<date-time>requiredenvironmentSessionSandboxEnvironmentBodyrequiredWhich image the sandbox boots. One variant today; a workspace
environment is a later variant of this union.
Show propertiesHide properties
One of:
object
releasestringrequiredThe platform image line the row was stamped with, e.g. `2026`.
typestringrequiredAllowed:
platformlast_used_atstring<date-time> | nullnamestringrequirednetworkSessionSandboxNetworkBodyrequiredWhere the sandbox may reach, as its grant said when the session was made.
Show propertiesHide properties
One of:
object
typestringrequiredAllowed:
unrestrictedobject
typestringrequiredAllowed:
nonestatusSessionSandboxStatusBodyrequiredStable lifecycle vocabulary for v1. Adding or changing a value requires a
new API version; additional internal states map to these public states.
- `dormant`: no instance has been started; an exec provisions one.
- `provisioning`: an instance is starting, restoring, or resuming; exec waits.
- `running`: an instance is available for exec.
- `draining`: backup, suspension, or retirement is in progress; exec waits.
- `suspended`: an idle instance is paused; an exec resumes it. Archive deletion
still returns 409 until automatic retirement.
- `archived`: the instance is retired; an exec provisions a new one and restores
the last published archive, if present. Archive deletion is permitted.
- `failed`: the generation failed; a new exec attempts provisioning from the
last published archive, if present. Archive deletion is permitted.
A published archive can be downloaded in any state. Status is a snapshot;
a concurrent exec or lifecycle transition can change whether deletion succeeds.
Allowed:
dormantprovisioningrunningdrainingsuspendedarchivedfailed400Malformed path parameter.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired401Missing, malformed, or invalid bearer token.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired403A workspace credential lacking session.read. A session token carries no permissions and never lands here.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired404No such session, or the caller cannot see it.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired