> ## Documentation Index
> Fetch the complete documentation index at: https://docs.costgraph.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenki Cloud sandboxes

> Run CostGraph workflows and CI jobs in Tenki Cloud sandboxes: the key to create, its permissions, and its limits

Tenki Sandbox provides disposable, full Linux virtual machines controlled from a CLI or Go, TypeScript and Python SDKs.

The following table shows what CostGraph runs on this provider.

| Workflows | CI runners | Connect with |
| - | - | - |
| Yes | Yes | Integrations or your own dispatcher |

## Connect

Connect Tenki Cloud on Integrations, and CostGraph starts sandboxes in your Tenki Cloud account. You don't run anything yourself.

1. In CostGraph, go to **Integrations > Sandbox > Tenki Cloud**.

2. Enter these fields:

   * **API key** (`TENKI_API_KEY`, required): A Tenki workspace API key from Tenki Sandbox > API Keys.

3. Click **Connect**.

For CI runners, CostGraph sets CPU and memory. `providerTemplate` takes an image reference.

### Your own dispatcher

To keep the key out of CostGraph or reach a private network, run your own dispatcher instead.
Set `provider` to `tenki` and the preceding fields as environment variables, as described in [Run your own dispatcher](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md#run-your-own-dispatcher).

To see what Tenki Cloud costs, connect the [Tenki Cloud integration](https://docs.costgraph.ai/costgraph/integrations/tenki.md).

## Key and permissions

TENKI\_API\_KEY is a Tenki workspace API key (tk\_...) created in the Tenki dashboard: Tenki Sandbox > API Keys > Create API Key (optional expiry). TENKI\_AUTH\_TOKEN is the SDKs' auth-token variable, read before TENKI\_API\_KEY; both carry the same bearer credential.

Keys are not scoped beyond the workspace: each API key belongs to exactly one workspace and sandbox requests infer it. No roles or permissions documented. Source: [https://tenki.cloud/docs/account/api-keys](https://tenki.cloud/docs/account/api-keys)

Sources: [tenki.cloud: api keys](https://tenki.cloud/docs/account/api-keys), [tenki.cloud: quick start sandbox](https://tenki.cloud/docs/sandbox/quick-start-sandbox), [tenki.cloud: sdk](https://tenki.cloud/docs/sandbox/sdk).

## Limits

* cpu\_cores 1-16 (default 2); memory\_mb 512-65,536 (default 4,096). ([source](https://tenki.cloud/docs/sandbox/sdk))
* Pause/Resume may not be available in every deployment; egress allowlists need SDK >= 1.1.0 and workspace enablement. ([source](https://tenki.cloud/docs/sandbox/sdk))
* Max lifetime, idle auto-stop, regions, sandbox architecture: not documented. ([source](https://tenki.cloud/docs/sandbox/quick-start-sandbox))

## Related

* [Supported sandbox providers](https://docs.costgraph.ai/costgraph/workflows/sandbox-providers.md)
* [Run workflows on a managed sandbox provider](https://docs.costgraph.ai/costgraph/workflows/managed-sandboxes.md)
* [Run CI jobs in sandboxes](https://docs.costgraph.ai/costgraph/autopilot/ci-sandboxes.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.