Base URL
All API requests are made to:Authentication
Every endpoint requires a Bearer token in theAuthorization header.
You can retrieve a token via the Pocketenv dashboard or by authenticating through the AT Protocol flow.
Errors
All errors return a JSON body witherror and message fields.
| Status | Meaning |
|---|---|
400 | Bad request — invalid parameters or missing fields |
401 | Unauthorized — missing or invalid Bearer token |
Resources
| Resource | Description |
|---|---|
| Actor | User profile and account-level sandbox access |
| Sandboxes | Full sandbox lifecycle — create, start, stop, exec, delete |
| Files | Read and write files inside a sandbox |
| Secrets | Encrypted key-value secrets scoped to a sandbox |
| Variables | Environment variables for sandbox configuration |
| Services | Long-running processes inside a sandbox |
| Volumes | Persistent storage volumes attached to sandboxes |
