v5

latestOpenAPI 3.0.3raw.githubusercontent.com2026-07-01224150.1 KB

Sandboxes

Update sandbox egress policy

Changes outbound network policy for a sandbox. Supported modes:

open — full outbound internet access.
deny_all — all outbound connections blocked.
restricted — default deny with an allowlist (allow required).

Switching between modes may reattach the sandbox to a different network profile. The response includes network_updated: true when that happens. Allow a few seconds for the new policy to take effect before probing from inside the sandbox.

Sandbox must be in status ready.

put/sandboxes/{id}/egress

Path parameters

idstring required

24-char hex id of the sandbox.

Request body

mode'open' | 'restricted' | 'deny_all' required

Outbound network policy for a sandbox.

open — full outbound internet access (default).
deny_all — all outbound connections blocked; inbound Brimble API calls still work.
restricted — default deny with an allowlist (allow required on update).

allowstring[]

Required when mode is restricted; must be omitted otherwise.

Response

Egress updated

messagestring required

Example response

{
  "message": "Sandbox egress updated",
  "data": {
    "region": {
      "id": "6a06df21cc6bef51342e199e",
      "name": "eu-west",
      "country": "France",
      "continent": "Europe"
    },
    "egress": {
      "mode": "restricted",
      "allow": [
        "1.1.1.1",
        "api.example.com"
      ]
    }
  }
}