Sandbox backends

For isolated AgentCore or Daytona workspaces used with the SDK Sandbox, see the API documentation:

• Sandbox backends API
• Sandbox overview
• SandboxPlugin

When agents run in sandbox mode, host tools such as shell, python_repl, and file_read / file_write are blocked in favor of workspace tools from SandboxPlugin.

Environment variables

Sandbox backend templates are configured via constructor arguments (see Sandbox backends API), not category-specific tool env vars.

For CI / automation with host prebuilt tools, see BYPASS_TOOL_CONSENT and shared environment variables.

See also

• Prebuilt Tools overview