Declaw icon

Declaw

Run code securely in Firecracker microVM sandboxes — create sandboxes, execute commands, manage files

Actions24

Sandbox → Create

AI-generated

Summary

Creates a new Firecracker microVM sandbox in Declaw from a chosen template via POST /sandboxes, with optional env vars, metadata, network rules, and security policy. Returns the API's sandbox record for each input item.

Inputs

  • Template — Base image: ai-agent, base, code-interpreter, devops, mcp-server, node, python, or web-dev. Defaults to base.
  • Timeout (Seconds) — Auto-kill timeout sent as timeout. Default 300; 0 means no timeout.
  • Additional Fields > Environment Variables — Key/value pairs sent as envs.
  • Additional Fields > Metadata — Key/value pairs sent as metadata.
  • Additional Fields > Network Allow List — Comma-separated domains sent as network.allow_out. Empty allows all.
  • Additional Fields > Network Deny List — Comma-separated domains sent as network.deny_out.
  • Additional Fields > Enable PII Protection — Adds a security.pii policy. Uses PII Action (block, log_only, redact; default redact) and PII Types (default email, phone_number, ssn, credit_card). Response rehydration is off.
  • Additional Fields > Enable Injection Defense — Adds a security.injection_defense policy with action block and threshold 0.8. Injection Sensitivity (low, medium, high) defaults to medium.
  • Additional Fields > Security Policy JSON — Raw JSON object sent as security. If provided, it replaces the PII and injection toggles. Invalid JSON or a non-object value throws an error.

Output shape

One JSON item per input item containing the Declaw API's create-sandbox response (including the sandbox ID, which other operations take as Sandbox ID).

The exact response fields aren't defined in the node. Other code in the node reads sandbox_id from this response. With Continue On Fail enabled, a failed item yields {error: message}. Created sandboxes persist until the timeout expires or they are killed.

Examples

Example 1: Create a locked-down Python sandbox for running untrusted scripts

Template: python; Timeout: 600; Network Allow List: pypi.org; Network Deny List: 169.254.169.254

Example 2: Sandbox for an AI agent with PII redaction and injection defense

Template: ai-agent; Enable PII Protection on (Redact, Email + SSN); Enable Injection Defense on (High)

Example 3: Sandbox with environment variables and tracking metadata

Template: node; Environment Variables: API_URL=https://example.com; Metadata: workflow=nightly-build

Links

Discussion