All integrations

E2B

DEVELOPER · DEVELOPER

Cloud sandboxes for untrusted code, with their logs and metrics, on their own key.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

e2b_delete_events_webhooks_by_webhookidWRITE

Delete event webhook via DELETE /events/webhooks/{webhookID}. Delete a registered webhook.

api
e2b_delete_sandboxes_by_sandboxidWRITE

Kill sandbox via DELETE /sandboxes/{sandboxID}. Kill a sandbox

api
e2b_delete_secrets_by_secretidWRITE

Delete a secret via DELETE /secrets/{secretID}. Revoke the secret and schedule its versions for cleanup.

api
e2b_delete_templates_by_templateidWRITE

Delete template via DELETE /templates/{templateID}. Delete a template

api
e2b_delete_templates_tagsWRITE

Delete template tags via DELETE /templates/tags. Delete multiple tags from templates

api
e2b_delete_volumes_by_volumeidWRITE

Delete team volume via DELETE /volumes/{volumeID}. Delete a team volume

api
e2b_get_events_sandboxesREAD

Team sandbox events via GET /events/sandboxes. Get all sandbox events for the team associated with the API key

api
e2b_get_events_sandboxes_by_sandboxidREAD

Sandbox events via GET /events/sandboxes/{sandboxID}. Get sandbox events

api
e2b_get_events_webhooksREAD

List event webhooks via GET /events/webhooks. List registered webhooks.

api
e2b_get_events_webhooks_by_webhookidREAD

Event webhook via GET /events/webhooks/{webhookID}. Get a registered webhook.

api
e2b_get_events_webhooks_by_webhookid_deliveriesREAD

Webhook delivery attempts via GET /events/webhooks/{webhookID}/deliveries. List webhook delivery attempts.

api
e2b_get_events_webhooks_by_webhookid_statsREAD

Webhook delivery stats via GET /events/webhooks/{webhookID}/stats. Get webhook delivery aggregate stats.

api
e2b_get_healthREAD

Health check via GET /health.

api
e2b_get_sandboxesREAD

List running sandboxes via GET /sandboxes. List all running sandboxes. Use GET /v2/sandboxes instead. DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_get_sandboxes_by_sandboxidREAD

Sandbox via GET /sandboxes/{sandboxID}. Get a sandbox by id

api
e2b_get_sandboxes_by_sandboxid_logsREAD

Sandbox logs via GET /sandboxes/{sandboxID}/logs. Get sandbox logs. Use /v2/sandboxes/{sandboxID}/logs instead. DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_get_sandboxes_by_sandboxid_metricsREAD

Sandbox metrics via GET /sandboxes/{sandboxID}/metrics. Get sandbox metrics

api
e2b_get_sandboxes_metricsREAD

List sandbox metrics via GET /sandboxes/metrics. List metrics for given sandboxes

api
e2b_get_secretsREAD

List project secrets via GET /secrets. List the project's secrets. No response carries a secret value.

api
e2b_get_secrets_by_secretidREAD

Get a secret via GET /secrets/{secretID}. Get one secret's metadata, selected by identifier or name.

api
e2b_get_snapshotsREAD

List snapshots via GET /snapshots. List all snapshots for the team

api
e2b_get_teams_by_teamid_metricsREAD

Team metrics via GET /teams/{teamID}/metrics. Get metrics for the team

api
e2b_get_teams_by_teamid_metrics_maxREAD

Maximum team metrics via GET /teams/{teamID}/metrics/max. Get the maximum metrics for the team in the given interval

api
e2b_get_templatesREAD

List templates via GET /templates. List all templates DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_get_templates_aliases_by_aliasREAD

Check template alias via GET /templates/aliases/{alias}. Check if template with given alias exists

api
e2b_get_templates_by_templateidREAD

List template builds via GET /templates/{templateID}. List all builds for a template

api
e2b_get_templates_by_templateid_builds_by_buildid_logsREAD

Template build logs via GET /templates/{templateID}/builds/{buildID}/logs. Get template build logs

api
e2b_get_templates_by_templateid_builds_by_buildid_statusREAD

Template build status via GET /templates/{templateID}/builds/{buildID}/status. Get template build info

api
e2b_get_templates_by_templateid_files_by_hashREAD

Template build file upload URL via GET /templates/{templateID}/files/{hash}. Get an upload link for a tar file containing build layer files

api
e2b_get_templates_by_templateid_tagsREAD

List template tags via GET /templates/{templateID}/tags. List all tags for a template

api
e2b_get_v2_sandboxesREAD

List sandboxes (v2) via GET /v2/sandboxes. List all sandboxes

api
e2b_get_v2_sandboxes_by_sandboxid_logsREAD

Sandbox logs (v2) via GET /v2/sandboxes/{sandboxID}/logs. Get sandbox logs

api
e2b_get_v2_templatesREAD

List templates (v2) via GET /v2/templates. List all templates

api
e2b_get_volumesREAD

List team volumes via GET /volumes. List all team volumes

api
e2b_get_volumes_by_volumeidREAD

Team volume via GET /volumes/{volumeID}. Get team volume info

api
e2b_patch_events_webhooks_by_webhookidWRITE

Update event webhook via PATCH /events/webhooks/{webhookID}. Update a registered webhook configuration.

api
e2b_patch_templates_by_templateidWRITE

Update template via PATCH /templates/{templateID}. DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_patch_v2_templates_by_templateidWRITE

Update template (v2) via PATCH /v2/templates/{templateID}. Update template

api
e2b_post_events_webhooksWRITE

Register event webhook via POST /events/webhooks. Register events webhook.

api
e2b_post_sandboxesWRITE

Create sandbox via POST /sandboxes. Create a sandbox from the template. Use POST /v2/sandboxes instead. DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_post_sandboxes_by_sandboxid_connectWRITE

Connect sandbox via POST /sandboxes/{sandboxID}/connect. Returns sandbox details. If the sandbox is paused, it will be resumed. TTL is only extended. Use POST /v2/sandboxes/{sandboxID}/connect instead. DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_post_sandboxes_by_sandboxid_forkWRITE

Fork sandbox via POST /sandboxes/{sandboxID}/fork. Fork the sandbox: checkpoint the running sandbox in place (it is briefly paused, snapshotted with its full memory state, and resumed on its node, keeping its ID and expiration untouched) and create count new sandboxes from that snapshot. Returns one result per requested fork, each carrying either the created sandbox or the error that prevented it from starting. A non-201 status means the request failed before any fork was attempted.

api
e2b_post_sandboxes_by_sandboxid_pauseWRITE

Pause sandbox via POST /sandboxes/{sandboxID}/pause. Pause the sandbox DESTRUCTIVE TO A RUNNING WORKLOAD: this suspends a live sandbox and every process inside it stops. It is reversible with Resume sandbox, but do not call it speculatively against a sandbox someone is using.

api
e2b_post_sandboxes_by_sandboxid_refreshesWRITE

Refresh sandbox via POST /sandboxes/{sandboxID}/refreshes. Refresh the sandbox extending its time to live

api
e2b_post_sandboxes_by_sandboxid_resumeWRITE

Resume sandbox via POST /sandboxes/{sandboxID}/resume. Resume the sandbox DEPRECATED by E2B in its own API specification -- it still answers today, but prefer the replacement named above where one is given.

api
e2b_post_sandboxes_by_sandboxid_snapshotsWRITE

Create snapshot via POST /sandboxes/{sandboxID}/snapshots. Create a persistent snapshot from the sandbox's current state. Snapshots can be used to create new sandboxes and persist beyond the original sandbox's lifetime.

api
e2b_post_sandboxes_by_sandboxid_timeoutWRITE

Set sandbox timeout via POST /sandboxes/{sandboxID}/timeout. Set the timeout for the sandbox. The sandbox will expire x seconds from the time of the request. Calling this method multiple times overwrites the TTL, each time using the current timestamp as the starting point to measure the timeout duration. DESTRUCTIVE TO A RUNNING WORKLOAD: this OVERWRITES the sandbox's time to live, measured from the moment of the request, so a small value kills a running sandbox and the previous expiry cannot be recovered. E2B exposes no DELETE verb for this effect, which is why it is marked destructive.

api
e2b_post_secretsWRITE

Create a secret via POST /secrets. Create a secret by storing a runtime marker as its first version. The response carries metadata only.

api
e2b_post_secrets_by_secretidWRITE

Update a secret via POST /secrets/{secretID}. Replace the secret's stored marker by appending a new version. The response carries metadata only.

api
e2b_post_templates_tagsWRITE

Assign template tags via POST /templates/tags. Assign tag(s) to a template build

api
e2b_post_v2_sandboxesWRITE

Create sandbox (v2) via POST /v2/sandboxes. Create a sandbox from the template. All system communication with the sandbox is secured.

api
e2b_post_v2_sandboxes_by_sandboxid_connectWRITE

Connect sandbox (v2) via POST /v2/sandboxes/{sandboxID}/connect. Returns sandbox details. If the sandbox is paused, it will be resumed. TTL is only extended. The request body is optional; an omitted timeout defaults to 300 seconds.

api
e2b_post_v2_templates_by_templateid_builds_by_buildidWRITE

Start template build (v2) via POST /v2/templates/{templateID}/builds/{buildID}. Start the build

api
e2b_post_v3_templatesWRITE

Create template (v3) via POST /v3/templates. Create a new template

api
e2b_post_volumesWRITE

Create team volume via POST /volumes. Create a new team volume

api
e2b_put_sandboxes_by_sandboxid_networkWRITE

Update sandbox network via PUT /sandboxes/{sandboxID}/network. Update the network configuration for a running sandbox. Replaces the current egress rules with the provided configuration. Omitting field clears it. DESTRUCTIVE TO A RUNNING WORKLOAD: this REPLACES a running sandbox's egress rules wholesale and, in E2B's own words, 'omitting field clears it' -- so a partial body silently removes network configuration that cannot be read back from the API to restore.

api

Put E2B behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.