Custom templates
Build your own templates
- Template builds:
anona-compute template buildfrom a Dockerfile, and the stock E2B SDK’sTemplate.buildande2bCLI commands, served by the gateway (/v3/templates, file uploads, build status, logs, list, get, delete, aliases). Each build runs in its own rootless BuildKit container with no credentials and only proxied egress, gets the Anona runtime layer, and is registered forcreate -t <name>. - Templates page in the dashboard: list, build status, build log, delete. MCP tool
list_templates. - Template, build-concurrency and context-size quotas per organization.
Preview links, idle pause
Preview links, public ports, pause when idle
- Preview links: signed, expiring links to one port of a sandbox (
anona-compute preview,POST /v1/sandboxes/{id}/preview-links, MCPget_preview_url, the dashboard’s Share preview), revocable at once. - Public ports: make one port public without opening the rest (
anona-compute preview <id> <port> --public). - Pause when idle: a sandbox pauses itself after a set time with no traffic, sessions or processes (
PUT /v1/sandboxes/{id}/auto-pause,autoPause: {"idleMinutes": n}on create, or the dashboard’s No limit (pauses when idle)).
Webhooks, telemetry, DOM view
Webhooks, OpenTelemetry export, DOM live view, thumbnails
- Webhooks: signed (Standard Webhooks) callbacks for sandbox lifecycle events, with retries, a delivery log and resend. See Webhooks and telemetry.
- OpenTelemetry export: per-sandbox CPU, memory and network metrics and lifecycle spans to your OTLP/HTTP endpoint.
- DOM live view: the page open in a sandbox’s Chrome, replayed in your browser.
- Thumbnails: a WebP of each sandbox every 3 seconds, on the dashboard and at
GET /v1/sandboxes/{id}/thumbnail. - New API key scope
integrations:managefor the webhook and export settings.
Network, vault, usage
Network settings, credential vault, usage
- Team egress settings: the default network policy of new sandboxes, on the dashboard’s Network page or
GET/PUT /v1/network, withGET /v1/sandboxes/{id}/network/effectiveto see which layer a sandbox’s policy came from. - Change a running sandbox’s network: E2B’s
update_network(PUT /sandboxes/{id}/network) now works. - Credential vault: store API tokens once and reference them in header rules as
${vault.<name>}; the egress proxy injects them and the sandbox never sees the value. - Usage and billing:
anona-compute usage, the MCPget_usagetool, andGET /v1/usageand/v1/billingwith the newusage:readandbilling:readAPI key scopes. - CLI & agent sessions: a dashboard page lists every machine signed in with
anona-compute loginand revokes them; sign-outs, revocations and role changes now reach the API within seconds.
Preview
Developer preview
Sandboxes- E2B-compatible API: create (v1 and v2), list, get, kill, connect, pause, resume, timeout and refresh, with E2B-shaped errors. Checked with the stock
e2bSDK 2.20.3, 2.51.0 and 2.61.0. - Long-running sandboxes:
timeout=-1for no deadline on plans without a maximum lifetime, and pause instead of kill at timeout. - Templates
base,python,node,code-interpreter,desktopandcoding-agent. - Egress policy at create: plan defaults, allow and deny lists, and a platform floor that always blocks private ranges and cloud metadata.
- Every sandbox request passes the sandbox edge, which checks a per-sandbox token.
- Live view of the terminal and the desktop, embeddable in your page, with short-lived viewer tokens and revoke-all.
- SSH with 10-minute certificates:
anona-compute ssh,scp,--print-configfor editors.
anona-computeCLI: browser sign-in, lifecycle,exec,run,connect,ssh,scp,view,desktop, profiles.anona-compute mcp: an MCP server for Claude Code, Codex, Cursor and other clients, over stdio or loopback HTTP.- SDK extras
anona(Python) and@anona/sdk(TypeScript):sandbox.liveandsandbox.ssh. - Dashboard: organizations and roles, scoped API keys with expiry and sandbox lists, sandboxes with live view, usage and invoice drafts.