How is Novita Sandbox isolated?

Each Novita Sandbox is a separate runtime with its own filesystem, processes, and network, so code in one sandbox can’t see another sandbox or your machine. SDK access is token-protected by default, and you can make URLs private, restrict outbound traffic, and keep secrets out of the sandbox.

Details

Layer	What isolates it	Default
Runtime	Each sandbox has its own filesystem, process space, and network stack	Always on
SDK access (commands, files, PTY, upload/download URLs)	Per-sandbox access token, attached by the SDK automatically	On since SDK v2.0.0 (`secure`)
Service URLs (`https://{port}-{sandboxId}.{domain}`)	Traffic access token in the `Sandbox-Traffic-Access-Token` header	Public unless `allowPublicTraffic` is `false`
Outbound network	Disable internet access, or allow / deny domains and CIDRs	Internet access on
Credentials	Secrets: the sandbox sees only a placeholder; the real value is injected into HTTPS headers for allowed hosts	Opt in
Data lifetime	Ephemeral disk is deleted when the sandbox is killed, including on timeout unless the lifecycle pauses it	Always on

secure and allowPublicTraffic are fixed while a sandbox is running. To change them, start a new sandbox.

How to

Create a locked-down sandbox: private URLs, egress limited to one API, and an API key passed as a secret.

from novita_sandbox import Novita

novita = Novita()
sandbox = novita.sandbox.create(
    network={
        "allow_public_traffic": False,
        "allow_out": ["api.openai.com"],
        "deny_out": ["0.0.0.0/0"],
    },
    secret_envs={"OPENAI_API_KEY": "openai-key"},  # name of an existing Secret
)
print("Traffic token:", sandbox.traffic_access_token)

import { Novita } from 'novita-sandbox'

const novita = new Novita()
const sandbox = await novita.sandbox.create({
  network: {
    allowPublicTraffic: false,
    allowOut: ['api.openai.com'],
    denyOut: ['0.0.0.0/0'],
  },
  secretEnvs: { OPENAI_API_KEY: 'openai-key' }, // name of an existing Secret
})
console.log('Traffic token:', sandbox.trafficAccessToken)

Learn more: Secured access · Internet access · Secrets

Last modified on November 11, 2026

⌘I

Get started

Model APIs

Novita Sandbox

GPUs

Observability

Resources

How is Novita Sandbox isolated?

Details

How to

​Details

​How to

​Related questions

Details

How to

Related questions