Base URL
api.declaw.ai.
Authentication
All requests require anX-API-Key header. See Authentication
for details.
Request Format
All request bodies must be JSON. Set theContent-Type: application/json header on
every POST and PATCH request.
413 Request Entity Too Large.
Response Format
All responses are JSON. Successful responses return the resource object or an operation result directly at the top level. There is no top-leveldata wrapper.
Error Format
Errors return a JSON object with a singlemessage field explaining the problem.
HTTP Status Codes
| Code | Meaning |
|---|---|
200 | Success |
201 | Resource created |
400 | Invalid request — check the message field |
401 | Missing or invalid API key |
404 | Resource not found |
410 | Sandbox has been killed |
500 | Internal server error |
502 | The in-VM envd daemon is unreachable |
503 | Orchestrator unavailable (VM could not be created) |
Resource IDs
All resource IDs use a short-prefix format:| Resource | Format | Example |
|---|---|---|
| Sandbox | sbx- + 8 chars | sbx-a1b2c3d4 |
| Snapshot | snap- + 8 chars | snap-a1b2c3d4 |
Pagination
TheGET /sandboxes endpoint returns a next_token field alongside the
sandboxes array. A null value means there are no further pages. Future
endpoints that return large lists will follow the same cursor-based pagination
pattern.
Timestamps
All timestamps are returned in ISO 8601 format in UTC, for example:2024-01-15T10:30:00Z.
Path Parameters
Path parameters use snake_case, for example:API Groups
The API is organized into three resource groups:Sandbox
Create, inspect, pause, snapshot, and kill sandbox VMs.
Command
Run commands synchronously or with streaming. Manage background processes.
Filesystem
Read, write, list, rename, and watch files inside a sandbox.