Skip to main content
POST
Issue a short-lived SSH user certificate for the sandbox.

Authorizations

Authorization
string
header
required

Opaque instabox access token (1 hour). Refresh with /v1/auth/refresh (refresh token valid 30 days, rotates on use).

Headers

Idempotency-Key
string
required

Client-generated key, 1-200 printable ASCII characters, scoped to the user. Same key and same method+path+body returns the original response; same key with a different request returns 409 idempotency_conflict. Records are kept for 7 days.

Required string length: 1 - 200
Pattern: ^[\x21-\x7e]+$

Path Parameters

id
string
required

Sandbox ID (m_ + 26 lowercase base32 characters).

Pattern: ^m_[a-z2-7]{26}$

Body

application/json
publicKey
string
required

Client public key in authorized_keys format.

ttlSeconds
integer

Default 3600, max 86400.

Required range: 1 <= x <= 86400

Response

Certificate issued.

id
string
required

Connection ID (cn_…), also the certificate key ID.

machineId
string
required
transport
enum<string>
required
Available options:
ssh
host
string
required
port
integer
required
username
string
required
certificate
string
required

User certificate in authorized_keys format.

expiresAt
string<date-time>
required
hostTrust
object
required