Create an ephemeral sandbox, run a shell command, return the output, and destroy the sandbox. Best for quick one-off tasks like running a script, checking a command, or testing code.

Create and boot a persistent named sandbox with full configuration. The sandbox stays running until explicitly stopped.

List all sandboxes with their status.

Get detailed information about a specific sandbox including full configuration.

Stop a running sandbox. Use force to kill with SIGKILL instead of graceful SIGTERM.

Remove a sandbox. Must be stopped unless force is true.

Execute a command inside a running sandbox and return stdout/stderr/exit code.

Execute a shell command or script string inside a running sandbox. Interprets pipes, redirects, and shell syntax.

Read a file from the sandbox filesystem and return its contents as text.

Write content to a file inside the sandbox. Creates parent directories as needed.

List directory contents inside the sandbox.

Create a directory with parent directories inside the sandbox.

Remove a file or directory inside the sandbox.

Get file or directory metadata (kind, size, mode, modified time) inside the sandbox.

Create a named persistent volume. Volumes survive sandbox restarts and can be shared across sandboxes.

List all named volumes.

Remove a named volume.

Verify that msb and libkrunfw are available on the system. Returns installation status. If not installed, the server can attempt to install them.

Get live resource usage metrics (CPU, memory, disk, network) for a running sandbox.