Connect
Connect Mosaic on Integrations, and CostGraph starts sandboxes in your Mosaic account. You don’t run anything yourself.- In CostGraph, go to Integrations > Sandbox > Mosaic.
-
Enter these fields:
- API key (
MOSAIC_API_TOKEN, required): A Mosaic organization API key.
- API key (
- Click Connect.
Your own dispatcher
To keep the key out of CostGraph or reach a private network, run your own dispatcher instead. Setprovider to mosaic and the preceding fields as environment variables, as described in Run your own dispatcher.
Key and permissions
MOSAIC_API_TOKEN is an organization-scoped Mosaic API key (msk_live_…). Get it from “mos login” or signup, then mint a narrower one with POST /v1/api-keys and a scopes array. Documented: sandboxes:write (create POST /v1/sandboxes, delete DELETE /v1/sandboxes/{id}), sandboxes:exec (POST /v1/sandboxes/{id}/exec) and sandboxes:read (list GET /v1/sandboxes). A self-serve signup key also carries billing, audit and identity scopes, so mint a CI key with only these three. Sources: sandbox.mosaicos.com: llms.txt, sandbox.mosaicos.com: keys, sandbox.mosaicos.com: openapi.json, sandbox.mosaicos.com: docs.Limits
- Synchronous exec timeout_ms defaults to 30000 and may not exceed 900000 (15 min). Streaming exec has no ceiling. (source)
- Automatic hibernation begins after three quiet seconds. A sandbox has an inactivity deadline (ttl_seconds; 0 removes it); with persist:true it is archived at the deadline instead of destroyed. (source)
- Self-serve shapes go up to 16 vCPU/32768 MiB. Every template serves 1, 2 and 4 vCPU; 8 and 16 vCPU need base or a custom environment. (source)
- Regions: Silicon Valley and Northern Virginia, no EU region. Sandboxes are Linux only; Windows is a prototype. (source)