← E2B

Can an agent start a sandbox with E2B Sandboxes?

A person steps in at setup: a person hands over a key or token, a person signs up or registers a client for it and a person puts a card on file. Job reachable, not yet run.

observedProbed revision sha256:4b7e3aa19e5a…

Who does each step

Whether the agent handles it alone or a person has to step in.

  1. 01

    Discover

    Machine

    The vendor's own machine-readable documents lead an agent to the job's interface.

  2. 02

    Authority

    Workaround · setup

    A person hands the agent a key or token.

  3. 03

    Onboard

    Workaround · setup

    A person signs up, or registers a client, for the agent.

  4. 04

    Pay

    Workaround · setup

    A person puts a card on file once, at the vendor's checkout.

  5. 05

    Confirm

    Machine

    A failure comes back typed, in its answer or as its spec declares, so an agent can tell a failure from a success.

  6. 06

    Sustain

    Machine

    The agent can renew and revoke its own access.

A person once, at Authority: handing over a key or token.

A person once, at Onboard: signing up or registering a client for the agent.

A person once, at Pay: paying for it.

Not A+ yet: OAuth that lets an agent register its own client would turn handing over a key or token into a one-time consent; a way for agents to register (auth.md, a sign-up API, or OAuth with client registration) would let the agent register itself; payment inside the request (x402 or MPP) would let an agent pay its own way.

Agent surfaces

2 kinds · 5 entries
For agentsNames the job's endpoint
APINames the job's endpoint

The probe

13 Oct 2026 · 23:46 UTC · 39.18 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover29 descriptor reads6 facts
Found
For agentse2b.dev/llms.txtAPIapi.e2b.appAPIsandbox.e2b.appAPIapi.e2b.appFor agentsdocs.e2b.dev/llms.txtAPIapi.e2b.app
From
e2b.dev/llms.txt · e2b.dev/openapi.json · api.e2b.app/openapi.json · docs.e2b.dev/llms.txt
This endpoint
api.e2b.app is named by a descriptor it read
Job requestPOST api.e2b.app/sandboxes401105 ms
Request
POST https://api.e2b.app/sandboxes
Response
401 · application/json · 56 bytes
Body
sha256:d76005480fb3f409b03668dd5b0c45a62801fe1777471242292e3332fbc06f17
Exchange
sha256:c6be0ba58c4a1651e896da8981b2fde61218f7719b5196b9743f5912ae15a5e2
Resource metadataGET api.e2b.app/.well-known/oauth-protected-resource/sandboxes404146 ms
Request
GET https://api.e2b.app/.well-known/oauth-protected-resource/sandboxes
Response
404 · application/json · 74 bytes
Body
sha256:981f340976d211ed61e2378e683a7274a3e6a343e95486668989ebd825d82af0
Exchange
sha256:eca3e31c5b247419a6aafec11f789b40befec6e1ee17bf330d5d67388dbef274
Resource metadataGET api.e2b.app/.well-known/oauth-protected-resource40496 ms
Request
GET https://api.e2b.app/.well-known/oauth-protected-resource
Response
404 · application/json · 74 bytes
Body
sha256:981f340976d211ed61e2378e683a7274a3e6a343e95486668989ebd825d82af0
Exchange
sha256:c88641a465c1c2b66e172afbbeae13bcf05270e3a98d499bb9428d02ab008e3d
Declared pageGET console.e2b.dev/sign-up30784 ms
Request
GET https://console.e2b.dev/sign-up
Response
307 · application/json · 0 bytes
Body
sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange
sha256:ef970ce449cb5de37496cf108be094d644c6b9ef906e66f8d96400df5f38c202
Declared pageGET console.e2b.dev30771 ms
Request
GET https://console.e2b.dev
Response
307 · application/json · 0 bytes
Body
sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange
sha256:de038beadfdb92a76dc4ecd8212c7c01d5727209cf828edb35f3637b78ca338b

E2B on the startup-offers board

The grade’s badge

One image that keeps itself current, linking here.

Live badge for E2B Sandboxes, agent grade: B[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4tb02c87tza2b0yqdeg4t02.svg)](https://sourcey.com/c/e2b/agent-readiness/e2b-sandboxes/sandbox-code-run)

Improve the report

Correct it, probe it again, or improve the path.

Profile
arp_01m4tb02c87tza2b0yqdeg4t02
Projection
sha256:77633fb47c3036803439327a67a71b0c7d1cf6e5d46c916bf69eaaa3dc67f8ed
Policy
kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac