sbx create
| Description | Create a sandbox for an agent |
|---|---|
| Usage | sbx create [flags] AGENT PATH [PATH...] |
Description
Create a sandbox with access to a host workspace for an agent.
Use "sbx run --name SANDBOX" to attach to the agent after creation.
Commands
| Command | Description |
|---|---|
sbx create claude |
Create a sandbox for claude |
sbx create codex |
Create a sandbox for codex |
sbx create copilot |
Create a sandbox for copilot |
sbx create cursor |
Create a sandbox for cursor |
sbx create docker-agent |
Create a sandbox for docker-agent |
sbx create droid |
Create a sandbox for droid |
sbx create gemini |
Create a sandbox for gemini |
sbx create kiro |
Create a sandbox for kiro |
sbx create opencode |
Create a sandbox for opencode |
sbx create shell |
Create a sandbox for shell |
Options
| Option | Default | Description |
|---|---|---|
--clone
|
Run the agent on a private in-container clone of the host Git repository (mounted read-only) instead of bind-mounting the workspace; the agent's commits are accessible via the sandbox-<name> git remote on the host | |
--cpus
|
0
|
Number of CPUs to allocate to the sandbox (0 = auto: all host CPUs) |
--deny-network
|
Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress. | |
--kit
|
experimental Kit reference (directory, ZIP, or OCI). Can be specified multiple times | |
-m, --memory
|
Memory limit in binary units (e.g., 1024m, 8g). Default: 50% of host memory, max 32 GiB | |
--name
|
Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only) | |
-p, --publish
|
Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL] | |
-q, --quiet
|
Suppress verbose output | |
-t, --template
|
Container image to use for the sandbox (default: agent-specific image) |
Global options
| Option | Default | Description |
|---|---|---|
-D, --debug
|
Enable debug logging |
Examples
# Create a sandbox for Claude in the current directory
sbx create claude .
# Create a sandbox with a custom name
sbx create --name my-project claude /path/to/project
# Create with additional read-only workspaces
sbx create claude . /path/to/docs:ro
# Run the agent on an in-container clone of the host repo, wired back via a git-daemon
sbx create --clone claude .