Agent Sandboxes: SSH, developer image, repository tokens and OpenHands

Agent Sandboxes now offer SSH and editor access, a developer image, repository access tokens and the OpenHands agent server in production.

• SSH, scp, sftp and rsync reach a running sandbox. VS Code Remote-SSH works with it. Local port forwarding reaches only the sandbox’s own localhost.
• The developer image includes git, gh, Codex CLI, Claude Code, Go, rsync and sftp. Every tool is signed out. tmux and Docker are not included.
• POST /v1/customer/tenants/{workspace}/sandboxes/{id}/repository-tokenReturns a short-lived GitHub token for one repository. Read access is the default. Send "push": true to ask for push access, which also needs repositories:write. An API key needs sandboxes:write and repositories:read.
• Start Agent Server in a sandbox’s Agent panel runs the OpenHands agent server. OpenHands tasks need your workspace’s own OpenAI-compatible AI provider. Native Anthropic and OpenAI Responses providers are not supported yet.
• Persistent disks and the Docker layer cache are not available yet.