Skip to main content
Start an unattended launch run

Authorizations

Authorization
string
header
required

BoxRouter API key; never an upstream provider key.

Headers

Idempotency-Key
string
required

Unique identifier for this logical launch. Reuse it with the identical body to reconcile an uncertain response.

Required string length: 1 - 128
Pattern: ^[^\u0000]+$

Body

application/json

One unattended launch run. Uses the canonical launch request fields and requires copies; request-only credential values are refused by the server before reservation.

agent
string
required
Required string length: 1 - 63
Pattern: ^[a-z][a-z0-9-]{0,62}$
copies
integer
required

Number of independently managed copies to reserve atomically.

Required range: x >= 1
privacy
object

Privacy floors for the sandbox created by this launch. Cloud carries this policy unchanged into deferred sandbox materialization.

manifest
object

A complete inline agent manifest or a source wrapper whose command can come from the referenced file.

overrides
object
additional_secret_refs
object
credential_delivery
enum<string>
default:prefer_native

Whether compatible environment fallback is allowed or protected delivery is required.

Available options:
prefer_native,
require_native
run
object

Optional client supplied batch metadata. Each launch remains independent; the server stores the values on its launch operation, labels the sandbox group and copy, and echoes this object in the successful Launch result. The server does not check group completeness.

registry_credentials
object

Request-only login for a manifest whose image is {private_oci}; required with it and refused without it. Both strings are non-empty, at most 64 KiB UTF-8 bytes together. It is passed to the provider to set up a copy of the image and is never stored, logged, traced or returned. Not accepted by unattended launch runs.

secret_values
object

Request-only secret values for names declared by the resolved manifest. Unknown names are invalid_request. The server enforces request size limits outside JSON Schema validation. Values are never stored, returned or logged.

Response

Run and all copy rows were durably accepted, or recovered by idempotency key.

Plain metadata-only run response. It contains neither command observations nor output fields; GET is a provider-free read unless include=command is explicitly selected.

id
string
required
Minimum string length: 1
agent_name
string | null
required

Manifest name of the resolved catalog agent or inline manifest stored with the run; null when the stored run has none. No other launch request or manifest data is returned.

Minimum string length: 1
copies
integer
required
Required range: x >= 1
desired_state
enum<string>
required
Available options:
running,
stopped
created_at
string<date-time>
required
items
object[]
required