Skip to main content
POST
Issue an SSH token, for a plain `ssh` command without a key.

Authorizations

Authorization
string
header
required

Opaque instabox access token (1 hour). Refresh with /v1/auth/refresh (refresh token valid 30 days, rotates on use).

Path Parameters

id
string
required

Sandbox ID (m_ + 26 lowercase base32 characters).

Pattern: ^m_[a-z2-7]{26}$

Body

application/json
name
string

Optional display name; whitespace is trimmed, at most 100 UTF-8 bytes. Existing callers may omit it.

ttlSeconds
integer

Default 604800 (7 days), max 2592000 (30 days).

Required range: 1 <= x <= 2592000
noExpiry
boolean

A token that works until it is revoked: the reply has no expiresAt. Does not go with ttlSeconds.

Response

Token issued.

name
string
required
id
string
required

Connection ID (cn_…) of the token's grant.

machineId
string
required
host
string
required
port
integer
required
token
string
required

ibssh_ and 26 lowercase base32 characters (128 bits): the SSH user name. Shown only here.

command
string
required

ssh -p <port> <token>@<host> (without -p on port 22).

hostKeyFingerprint
string
required

SHA256 fingerprint of the SSH server's host key, which ssh asks to confirm on the first connection.

moshCommand
string

The same login with mosh: mosh --ssh="ssh -p <port>" <token>@<host> (mosh <token>@<host> on port 22). Absent when mosh is not available.

expiresAt
string<date-time>

Absent: the token does not expire (noExpiry).