Sandboxes
Partially update a running sandbox
Applies a partial update to a running sandbox. Each top-level field in the request body is optional; only fields that are present are applied. Omitted top-level fields are left unchanged. Nested objects are full replacements when present — to clear a list, send it as an empty array.
At least one top-level field must be present, otherwise the request is rejected with 400. Unknown top-level fields are also rejected with 400 so typos surface as errors instead of silent no-ops.
Currently patchable fields
- network — replaces the egress allow/deny rules. The sandbox must be in the active state; patching a paused or idle sandbox returns 409. Rules take effect immediately and are persisted so they survive a future pause/resume cycle.
patch/sandboxes/{sandbox_id}
Request body
Example request
{
"network": {
"allow_out": [
"api.openai.com",
"*.github.com"
],
"deny_out": [
"0.0.0.0/0"
]
}
}Response
Patch applied