Direct SSH access
You connect like to any machine. Your editor, your dotfiles, your usual flow.
sandbox · environment for agents
A persistent pod with SSH and its own volume that you manage. Start it empty or from a template (Claude Code, OpenCode, OpenClaw, Hermes) and it connects to your inference over an internal RDMA network, with an API key minted by the pod itself that never touches your laptop. It suspends itself when you're not using it.
getting started
In the wizard you pick resources (CPU, RAM, disk, GPU) and, if you want, an agent template (Claude Code, OpenCode…). You can also start an empty pod.
It boots with SSH, DDN storage and an RDMA link to Token Factory. Pay per active hour; while it's suspended, it doesn't count.
Log in over SSH with your key and the agent is ready. When you're not using it, it auto-suspends.
what it is
Codespaces pattern: you work over SSH, the Sandbox suspends after 30 min idle and comes back in seconds. Your persistent volume survives between sessions.
You connect like to any machine. Your editor, your dotfiles, your usual flow.
Repos, datasets and checkpoints survive shutdown. Nothing to reconfigure when you return.
After 30 min idle it suspends and stops billing. Back in seconds when you reconnect.
templates
Templates are an optional shortcut: instead of installing and wiring everything by hand, the Sandbox boots with the agent you choose already connected to Token Factory. If you'd rather, start from an empty pod and set it up your way.
Anthropic's coding agent with Claude models (egress to the Anthropic API).
Claude Code but on GLM 5.2 from the internal catalogue: no egress to Anthropic, all in the EU.
Open source coding agent, no lock-in to a single provider.
Agent environment for browser tasks and automation.
General-purpose agent template for custom workflows.
Need another template? Tell us and we'll add it to the catalogue.
connection with token factory
The Sandbox calls Token Factory over the cluster's internal RDMA network. Neither your API key nor your prompts hit the public internet.
The key travels over the cluster's internal network, never the open internet.
API and Sandbox in the same datacenter in Spain, over an RDMA fabric.
Sandbox and Token Factory draw from the same prepaid credit. One invoice.
storage
High-speed parallel storage, built for large repos, datasets and checkpoints without disk bottlenecks.
see it in action
Pick a template and the environment provisions itself: image, DDN storage and an RDMA link to Token Factory. Connect over SSH and get to work, your API key never leaves the perimeter.
pricing
While the Sandbox is suspended, it doesn't count. Pay per active hour, billed at the end of the month. No upfront payment.
frequently asked
Claude Code, OpenCode, OpenClaw and Hermes, preconfigured against Token Factory. Need another one? Tell us and we'll add it to the catalogue.
No. The volume is persistent: repos, datasets and checkpoints survive shutdown. On reconnect everything comes back in seconds, with nothing to reconfigure.
Over SSH with your public key, like any machine. Your editor, your dotfiles and your usual workflow.
Not today. The Sandbox uses the GPU via Token Factory over the internal RDMA network. A dedicated GPU inside the Sandbox is on the roadmap, with no committed date.
Per active hour, or a flat monthly plan with included hours. When it auto-suspends it stops counting. Same balance as Token Factory and dedicated GPU, in euros.
In our datacenter in Spain, on DDN EXAScaler storage. It never leaves Europe.
Pick template, size and billing mode. SSH access reaches you by email.