Skip to main content
GET
Read a sandbox's Secret selections and delivery status.

Authorizations

Authorization
string
header
required

Opaque instabox access token (1 hour). Refresh with /v1/auth/refresh (refresh token valid 30 days, rotates on use).

Path Parameters

id
string
required

Sandbox ID (m_ + 26 lowercase base32 characters) or the sandbox's name (unique among your sandboxes; names never contain _, so the two never collide). Older servers take only the ID and answer 404 for a name.

Pattern: ^(m_[a-z2-7]{26}|[a-z0-9][a-z0-9-]{0,62})$

Response

Current selections, effective Secret metadata and delivery status.

secrets
required

Proxy selection only. All includes current and future proxy Secrets in the sandbox's org. Explicit names resolve to stable IDs. An empty array selects none. Deleting and recreating a name does not restore an explicit grant. Null is rejected.

Allowed value: "all"
envSecrets
string[]
required

Direct references that are exactly the same-name shorthand ({secret X, env X}, no file). Renamed and file references appear only in directSecrets.

A unique environment variable name within an org. The names a sandbox's env reserves are reserved (shell variables such as PATH, HOME, BASH_ENV, ENV and IFS, session and trust-store variables, and INSTABOX_ and SSH_ prefixes). A Secret saved under a name before it was reserved is not delivered: the machine's guest status names it.

Pattern: ^[A-Za-z_][A-Za-z0-9_]{0,127}$
directSecrets
object[]
required

Direct references (names and paths, never values), envSecrets included.

items
object[]
required

Effective selected Secrets, including proxy all. Metadata only.

version
integer
required

Version of this sandbox's selection configuration.

proxy
object

Last node acknowledgement, not continuous health. Policies expire within 60 seconds unless renewed. Revocation is pending until applied or the previous lease expires. Already admitted streams may finish.

guest
object

Managed environment and public CA installation. This does not prove existing processes reloaded values. Removing env access cannot remove values already copied into process memory, files, or snapshots.

usage
object[]

Present when the server records proxied request counts: one entry per selected proxy Secret.