Skip to main content
Every agent session runs inside a sandbox: an isolated VM-like environment where the harness executes tool calls, runs commands, and edits files. The sandbox is provisioned per session and torn down when the session ends. You pick a provider in dari.yml under the sandbox: block and point it at a stored credential reference for that provider’s API key: 
sandbox:
  provider: e2b
  provider_api_key_secret: E2B_API_KEY

​
Supported providers

E2B

Supported today. Backed by E2B’s managed sandbox service.

More providers

In progress. We’re actively adding more sandbox providers so you can pick the one that fits your deployment.
Right now Dari only supports E2B as a sandbox provider. More providers are on the way — the sandbox block is designed so additional providers can slot in without changing the rest of your manifest.