Base URL
Authentication
Example authenticated request:Endpoint groups
| Group | Example endpoints |
|---|---|
| Session lifecycle | /session/start, /session/status, /session/stop, /session/restart-gateway |
| Realtime/WebSocket | /ws/{session_id}, /session/terminal/{session_id}, /ws/public/{handle} |
| Files | /session/files, /session/files/read, /session/files/write |
| Skills | /session/skills, /session/skills/{name} |
| Credentials | /credentials |
| Usage/Billing | /usage, /billing/* |
| Integrations/MCP | /session/inject, /mcp/*, /composio/* |
Realtime model
Cloud API authenticates websocket clients, resolves active sessions, then proxies traffic to runtime endpoints inside the sandbox.Typical client sequence
POST /session/startGET /session/status- Connect websocket (
/ws/{session_id}) - Perform file/skill calls as needed
POST /session/stopwhen done
Response and errors
Error payloads use standard HTTP status codes with descriptive JSONdetail messages.
Sessions
Session lifecycle, gateway restarts, and runtime injection.
Credentials and usage
Provider key handling, credit state, and usage metrics.

