Sandboxes

Sandboxes are isolated Linux machines in Buddy. They boot in milliseconds, keep their disk between sessions, and expose applications on public endpoints.

Create your first Buddy Sandbox from the web interface or the CLI, connect to it, run your project, and open the application on a public URL.

Every setting of a Buddy Sandbox - resources, boot commands, apps, fetch sources, endpoints, variables, tags, and timeout - and what you can change later.

Sandbox and application statuses, what persists on disk between sessions, how the Sandbox timeout works, and how a stopped Sandbox wakes on traffic.

Pull the project repository, a repository from another Buddy project, or a public repository into a Sandbox - with a destination path and a build command.

Define environment variables, files, and SSH keys for a Buddy Sandbox at workspace, project, or Sandbox level - encrypted and injected before the first command.

Save a Buddy Sandbox as a snapshot, start new Sandboxes from it, or revert to an earlier state - from the UI, the CLI, a pipeline, or the Sandbox itself.

Open a shell in a Buddy Sandbox from the browser or over SSH, connect your IDE to the machine, and understand who is authorized to connect and how.

Browse the persistent filesystem of a Buddy Sandbox, copy files in and out with the CLI, and manage them programmatically over the API and SDK.

Execute non-interactive commands in a Buddy Sandbox in Bash, JavaScript, TypeScript, or Python - with full history, logs, statuses, and exit codes.

Define long-running applications in a Buddy Sandbox, start and stop them, read their logs, and expose them to the internet through an endpoint.

Every log a Buddy Sandbox produces - setup, fetch, apps, commands, HTTP requests, and the activity audit trail - and where to read each in the UI and the CLI.

Expose applications running in a Buddy Sandbox over HTTP, TCP, or TLS - with regional placement, IP whitelisting, authentication, and static file serving.

Put Buddy authentication in front of a Sandbox endpoint and let the app inside read who the visitor is - name, email, and groups - with no login flow.

Serve an app running in a Buddy Sandbox on your own domain instead of a generated one - by routing the domain to a Sandbox endpoint through a distribution.

How access to a Buddy Sandbox is calculated from project roles, direct assignments, and groups - plus repository and artifact access, tokens, and IP whitelists.

Everyday Buddy Sandbox workflows with the bdy CLI - create, connect, run commands, copy files, expose ports, take snapshots, and inspect the machine.

The this command lets anything inside a Buddy Sandbox reconfigure that machine - endpoints, apps, snapshots, resources - with no identifier and no token.

Create and drive Buddy Sandboxes from code with @buddy-works/sandbox-sdk - the full lifecycle, commands, files, apps, and snapshots from TypeScript.

Run AI coding agents inside a Buddy Sandbox, let agents operate Sandboxes over MCP, and host Claude Managed Agents on Buddy infrastructure.

Create, deploy to, and tear down Buddy Sandboxes from a pipeline - with the Create and Manage Sandbox actions, Sandbox targets, and Sandbox event triggers.