> ## Documentation Index
> Fetch the complete documentation index at: https://docs.costgraph.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# CreateOS sandboxes

> Run CostGraph workflows and CI jobs in CreateOS sandboxes: the key to create, its permissions, and its limits

CreateOS Sandbox (by NodeOps) runs disposable Firecracker Linux microVMs for untrusted code, agents and CI jobs, managed over a REST API, SDKs or the createos CLI.

The following table shows what CostGraph runs on this provider.

| Workflows | CI runners | Connect with |
| - | - | - |
| Yes | Yes | Integrations or your own dispatcher |

## Connect

Connect CreateOS on Integrations, and CostGraph starts sandboxes in your CreateOS account. You don't run anything yourself.

1. In CostGraph, go to **Integrations > Sandbox > CreateOS**.

2. Enter these fields:

   * **API key** (`CREATEOS_SANDBOX_API_KEY`, required): A CreateOS API key from your CreateOS profile page.

3. Click **Connect**.

For CI runners, CostGraph sets CPU and memory and boots `providerTemplate` as the root filesystem.

### Your own dispatcher

To keep the key out of CostGraph or reach a private network, run your own dispatcher instead.
Set `provider` to `createos-sandbox` and the preceding fields as environment variables, as described in [Run your own dispatcher](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md#run-your-own-dispatcher).

To see what CreateOS costs, connect the [CreateOS integration](https://docs.costgraph.ai/costgraph/integrations/createos.md).

## Key and permissions

CREATEOS\_SANDBOX\_API\_KEY is a per-user CreateOS API key sent as X-Api-Key, obtained from the CreateOS dashboard profile page ([https://createos.sh/app/profile](https://createos.sh/app/profile)).

No scopes are documented for the per-user API key, which acts with the user's full access. The only narrower credential, a sandbox access token, is limited to one existing sandbox and cannot list ('GET /v1/sandboxes requires a user credential') or create, so the user API key is required.

Sources: [createos.sh: Overview](https://createos.sh/docs/Sandbox/REST-API/Overview/), [createos.sh: Limits](https://createos.sh/docs/Sandbox/Limits/), [createos.sh: Quickstart](https://createos.sh/docs/Sandbox/Quickstart/), [createos.sh: Access Tokens](https://createos.sh/docs/Sandbox/REST-API/Access-Tokens/).

## Limits

* No maximum session length: 'A sandbox runs until you destroy it, pause it, or it auto-pauses.' Auto-pause on idle is off by default (60-86,400 s when set; idle = no exec, file transfer or tunnel activity). ([source](https://createos.sh/docs/Sandbox/Limits/))
* Largest shape per plan: Free 1 vCPU/1 GB, Beginner 4 vCPU/4 GB, Pro 8 vCPU/8 GB, Enterprise 8 vCPU/16 GB; concurrent sandboxes Free 1, Beginner 5, Pro 20, Enterprise 30; no GPU. ([source](https://createos.sh/docs/Sandbox/Limits/))
* Bandwidth budget 50 GiB per sandbox by default; networking pauses when exhausted until recharged. ([source](https://createos.sh/docs/Sandbox/Limits/))
* Region chosen at create: eu or us. ([source](https://createos.sh/docs/Sandbox/Limits/))

## Related

* [Supported sandbox providers](https://docs.costgraph.ai/costgraph/workflows/sandbox-providers.md)
* [Run workflows on a managed sandbox provider](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md)
* [Run CI jobs in sandboxes](https://docs.costgraph.ai/costgraph/autopilot/ci-sandboxes.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.