CapabilitiesReaching it
Public link to a port
A web address that reaches a program running in the sandbox.
Who offers it
Part of Reaching it: links, ports and who can open them, which explains why it matters.
Fully: Agent 37, Blaxel, Boat, boxd, Daytona, E2B, InstaBox, Runtime, Sandboxer, Sprites, Tensorlake and Vercel Sandbox. With a catch: Cloudflare Sandbox and Modal. Not at all: Lizard.
A public port is permanent and needs no key; every other address on the machine still needs one.
docs-confirmed “an HTTPS URL for one port of one instance that anyone can reach with no credential at all” Source
A preview link can be created open to anyone or behind a token.
docs-confirmed “This preview URL can be either public (does not require you to be authenticated to access it) or private” Source
The link carries a token by default; adding --public removes it.
docs-confirmed “To get a URL without a token, add `--public`” Source
The machine's own address has nothing in front of it, so the link is the only secret.
docs-confirmed “Every machine gets an HTTPS domain automatically.” Source
A preview link is open to anyone when the machine is marked public.
docs-confirmed “If a sandbox has its `public` property set to `true`, preview links are publicly accessible without authentication.” Source
No token or login sits in front of the link.
docs-confirmed “By default, a sandbox's public URLs are reachable by anyone who knows them.” Source
Public is the default; a private port adds a token to the link.
docs-confirmed “once published **public** (the default), anyone can reach the whole service until you unpublish it” Source
A public preview needs a paid top-up; the default preview carries a token.
docs-confirmed “Public previews need a kept top-up” Source
Private is the default and puts a token in the link; --public clears it.
docs-confirmed “make it public (clears the token)” Source
A link can be switched between open to the internet and open only to your organisation.
docs-confirmed “Public means no authentication: anyone with the URL reaches whatever the HTTP service serves.” Source
A port stays behind your key until you mark it open to everyone.
docs-confirmed “So traffic to that user port becomes publicly reachable from the internet without TensorLake auth.” Source
Every exposed port answers on a public address with no lock of its own.
docs-confirmed “Exposed ports are accessible via a public URL, so be mindful of what services you run.” Source
The catch: There is no address for the machine itself; you publish a small program of your own and anyone who can open that address gets in.
docs-confirmed “The server has no public port, so your Worker forwards requests to it.” Source
The catch: A normal web port needs a connect token; only a port exposed as raw traffic is open to anyone.
docs-confirmed “you can also expose raw TCP ports to the internet” Source
- LizardNo
Note: Every preview link needs the machine's access token, so there is no open address to share.
docs-confirmed “a request without the sandbox's access token gets HTTP 401” Source
- MorphNot published
An HTTP service can be exposed, but whether the link is open or locked by default is not published.
inferred “Expose Http Service” Source
Related
Need several capabilities at once? Add more in the capability finder. Something wrong here? Use the report link at the bottom of the page.