Wallet model
Each account has one wallet with three separate pools that drain in a strict waterfall order:Sandbox free credits
$100 grant at account creation. Consumed first by sandbox compute charges (vCPU, memory, disk). Never refilled by deposits.
Guardrails free credits
$200 grant at account creation. Consumed first by guardrails scan charges (PII, injection, etc.). Never refilled by deposits.
sandbox_free_micros first, then fall through to balance_micros. Guardrails charges do the same with guardrails_free_micros. You can watch both drain in real time via GET /accounts/:owner_id.
The 200 free credits are one-time grants. They do not refill monthly or on deposit.
Sandbox compute pricing
Sandbox compute is metered every 30 seconds based on the sandbox’s provisioned resources (vCPUs, memory, disk). The metering tick caps at 90 seconds of billable time to bound exposure from delayed ticks.| Dimension | Rate | Equivalent |
|---|---|---|
| vCPU | 14.0 µ$ / vCPU / sec | $0.0504 / vCPU / hour |
| Memory | 4.5 µ$ / GB / sec | $0.0162 / GB / hour |
| Disk (overlay) | 0.0424 µ$ / GB / sec | $0.110 / GB / month |
Example
A sandbox with 2 vCPUs, 4 GB RAM, and 10 GB disk running for 1 hour costs:Guardrails scan pricing
Each guardrails scan is billed per invocation from the sandbox’s security proxy. Regex-based scans run locally in the proxy and are free. Only scans dispatched to the ML guardrails service are metered:| Scanner | Rate per scan | Equivalent |
|---|---|---|
| PII (Presidio + spaCy NER) | 600 µ$ | $0.0006 |
| Prompt injection (Prompt-Guard-86M) | 600 µ$ | $0.0006 |
| Toxicity (RoBERTa ONNX) | 400 µ$ | $0.0004 |
| Code security | 300 µ$ | $0.0003 |
| Language detection (XLM-RoBERTa) | 200 µ$ | $0.0002 |
| Invisible text | 100 µ$ | $0.0001 |
| Regex (local, in-proxy) | 0 | Free |
Deposits
Paid balance is topped up by explicit deposits — there is no auto-refill. Deposit amounts are bounded per tier:| Tier | Min deposit | Max deposit | Monthly recharge commitment |
|---|---|---|---|
| Free | $5 | $100 | None |
| Pro | $10 | $5,000 | $100 / month |
| Enterprise | $100 | $50,000 | $1,500 / month |
balance_micros and are drawn down by either sandbox or guardrails charges once free credits are exhausted.
What’s not billed
- Sandbox list / get / kill endpoints
- Health and status checks
- Template listing and snapshot metadata
- Regex guardrails scans (always local, always free)
- Failed or rejected requests (400 / 401 / 403 / 429 responses)
- Paused sandbox time (compute metering stops at pause, resumes on resume)