---
title: "Get sandbox by ID"
method: GET
path: "/api/sandbox/{id}"
tags: ["Sandboxes"]
---

# Get sandbox by ID

`GET /api/sandbox/{id}`

## Path parameters

- `id` string, uuid, required

## Response `200`

Sandbox details, including a runtime session token

- SandboxDetail
  - `id` string, uuid, required
  - `teamId` string
  - `status` 'active' | 'closed' | 'close-error' | 'error', required — Current sandbox lifecycle status.
  - `startTime` number, nullable — Start timestamp in epoch milliseconds.
  - `endTime` number, nullable — End timestamp in epoch milliseconds.
  - `createdAt` string, date-time
  - `updatedAt` string, date-time
  - `closeReason` string, nullable
  - `creditsUsed` number, nullable
  - `region` 'us' | 'us-central' | 'us-west' | 'us-east' | 'asia-south' | 'europe-west', required
  - `vcpus` integer, nullable
  - `memMiB` integer, nullable
  - `diskSizeMiB` integer, nullable
  - `timeoutMinutes` integer, nullable
  - `network` SandboxNetworkPolicy — Effective outbound network policy for a sandbox.
    - `allowInternetAccess` boolean, required — Whether general outbound internet access is allowed.
    - `allowOut` string[], required — Outbound allow rules. Each entry is an IPv4 address, CIDR range, or domain.
    - `denyOut` string[], required — Outbound deny rules. Each entry is an IPv4 address or CIDR range.
  - `sessionUrl` string — Dashboard URL for this sandbox.
  - `duration` number — Total runtime in milliseconds (0 while running).
  - `proxyBytesUsed` number
  - `runtime` SandboxRuntimeTarget, required — Connection details for the sandbox runtime API (process execution, files, terminals).
    - `transport` 'regional_proxy', required
    - `host` string, required — Regional runtime origin.
    - `baseUrl` string, required — Base URL for runtime API requests for this sandbox.
  - `exposedPorts` SandboxExposedPort[], required
    - `port` integer, required
    - `auth` boolean, required — Whether requests to the exposed URL require authentication.
    - `url` string, required — Public URL that routes to the exposed port.
    - `browserUrl` string — URL that bootstraps browser access. For authenticated ports this includes a short-lived grant token.
    - `browserUrlExpiresAt` string, date-time, nullable — Expiry of the browser bootstrap grant, if auth is enabled.
  - `token` string, nullable — Sandbox runtime session token (24h TTL). Null when the sandbox is unavailable.
  - `tokenExpiresAt` string, date-time, nullable

---

[API](https://skmtc.net/hyperbrowser/apis/hyperbrowser-api.md) · [All operations](https://skmtc.net/hyperbrowser/apis/hyperbrowser-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hyperbrowser/hyperbrowser-api/versions/69aa004ce41b/schema)