Skip to main content
Docker Cloud Sandboxes are Docker-hosted cloud sandboxes created from images that you control through the Docker Sandboxes API and TypeScript SDK. The following table shows what CostGraph runs on this provider.

​
Connect

Run the dispatcher with provider set to dockercloud and these variables:
  • DOCKER_USERNAME
  • DOCKER_PAT

​
Key and permissions

DOCKER_USERNAME is your Docker ID; DOCKER_PAT is a Docker personal access token created in Docker account settings > Personal access tokens with ‘Allow Cloud Sandboxes access’ selected. Requires an active Docker Agentic Platform subscription. The PAT needs the sandbox:use scope (granted by ‘Allow Cloud Sandboxes access’); registry permissions alone do not grant access, and no repository permission is needed. The account must also hold sandboxesCreate, sandboxesRead, sandboxesDelete, sandboxesExec and sandboxesCredential (exec). A list-specific permission is not documented. Sources: docs.docker.com: authentication, docs.docker.com: limits, docs.docker.com: sandboxes api, docs.docker.com: personal access tokens.

​
Limits

  • Sizes from micro (1 CPU / 2 GiB) to xl (16 CPU / 32 GiB). (source)
  • Default account quotas: 10 concurrent sandboxes, 50 stored sandboxes (stopped sandboxes still count). (source)
  • Max lifetime, idle stop, regions and architecture are not documented on these pages. (source)