Run commands

Execute processes directly in an isolated sandbox.

Fetch data-plane access, then use the returned RPC endpoint for command execution or an interactive terminal. Handle command output as untrusted data and set explicit timeouts in your agent loop.

The public control API does not proxy command execution. This separation keeps runtime credentials narrowly scoped and short lived.