> ## Documentation Index
> Fetch the complete documentation index at: https://docs.costgraph.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# boxd sandboxes

> Run CostGraph workflows and CI jobs in boxd sandboxes: the key to create, its permissions, and its limits

boxd runs persistent, hardware-isolated Linux machines that boot in milliseconds, fork and snapshot, and hibernate when idle.

The following table shows what CostGraph runs on this provider.

| Workflows | CI runners | Connect with |
| - | - | - |
| Yes | Yes | Integrations or your own dispatcher |

## Connect

Connect boxd on Integrations, and CostGraph starts sandboxes in your boxd account. You don't run anything yourself.

1. In CostGraph, go to **Integrations > Sandbox > boxd**.

2. Enter these fields:

   * **API key** (`BOXD_API_KEY`, required): A boxd API key, created with boxd auth keys create.
   * **API URL** (`BOXD_BASE_URL`, optional): A different boxd API address, if you do not use the default.

3. Click **Connect**.

### Your own dispatcher

To keep the key out of CostGraph or reach a private network, run your own dispatcher instead.
Set `provider` to `boxd` and the preceding fields as environment variables, as described in [Run your own dispatcher](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md#run-your-own-dispatcher).

## Key and permissions

BOXD\_API\_KEY is a boxd API key (prefix bxd\_) minted with `boxd auth keys create <name>` after browser login; optional `--expires-in-secs", "--org", and "--kind org` (userless service key, org admin only).

Keys have no permission scopes: every key is fenced to one organization. The default `--kind member` key acts as its creator within that org (full access to what the user can do there); `--kind org` is limited to the org's shared machines. A member key is sufficient.

Sources: [docs.boxd.sh: authentication](https://docs.boxd.sh/cli/authentication.md), [docs.boxd.sh: resources](https://docs.boxd.sh/guides/resources.md), [docs.boxd.sh: suspend resume](https://docs.boxd.sh/guides/suspend-resume.md), [docs.boxd.sh: regions](https://docs.boxd.sh/guides/regions.md).

## Limits

* Auto-hibernate on by default after 4 hours without TCP/UDP traffic in either direction; auto-suspend (standby) is off by default. Both are tunable or can be disabled per machine. ([source](https://docs.boxd.sh/guides/suspend-resume.md))
* Sizes 1/2/4/8 vCPU with 4/8/16/32 GiB (default 2 vCPU / 8 GiB), 100 GB fixed disk; quota max 8 vCPU / 32 GiB per machine unless raised. ([source](https://docs.boxd.sh/guides/resources.md))
* 50 machines per organization per region (hibernated and stopped count); 2 machines without a payment method. ([source](https://docs.boxd.sh/guides/resources.md))
* Regions: Frankfurt (fra) and New York (nyc). ([source](https://docs.boxd.sh/guides/regions.md))

## Related

* [Supported sandbox providers](https://docs.costgraph.ai/costgraph/workflows/sandbox-providers.md)
* [Run workflows on a managed sandbox provider](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md)
* [Run CI jobs in sandboxes](https://docs.costgraph.ai/costgraph/autopilot/ci-sandboxes.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.