Docs
Sign in

Open it up

Browser IDE

Open VS Code in the browser, running inside a sandbox, with the sandbox’s files and terminal — for reviewing what an agent built or picking up where it left off.

POST /v1/sandboxes/{sandbox_id}/ide/sessions

Starts OpenVSCode Server inside an active sandbox and returns a link to it. The request has no body.

curl -sS -X POST "$SPAWN_API_URL/v1/sandboxes/$SANDBOX_ID/ide/sessions" \
  -H "Authorization: Bearer $SPAWN_API_KEY"
Response 201 Created 
{
  "url": "https://3001-3ecb0221-faf1-4976-a8ae-6fd6262de59a.dev-sandbox.renderops.com/?ro_auth=<single-use-token>",
  "expires_at": "2026-08-17T11:11:00Z"
}
  1. Open the url within 60 seconds. The token in it works once.
  2. The first visit swaps the token for a secure, HTTP-only cookie and redirects to the same address without the token, so it doesn’t linger in history or logs.
  3. The cookie lasts one hour and only works for this sandbox’s IDE address. It’s removed before requests reach the sandbox, so code running inside never sees it.
Ctrl I