Sandboxes running at once come from your plan: 2, 5, 10, 25, 60 or 125 (2 during the free trial). Ask us to raise it.
Sandbox names: 1–40 characters, lowercase letters, digits and dashes.
Up to 100 sandboxes per new or fork call, and up to 20 SSH keys.
10,000 API requests per 60 seconds per IP address (per /64 over IPv6), and 32 labels per sandbox.
Up to 10 webhook endpoints. Each event is tried up to 8 times.
Tokenmail inboxes: up to 100 per account (ask for more), one per VM. Messages up to 10 MB, 50 recipients each, 100 an hour per inbox (more are deferred and the sender retries), kept 30 days.
GitHub: the sandbox token lasts 1 hour and reaches up to 100 token repositories. CI jobs run up to 6 hours 15 minutes and are listed 30 days.
Email codes: 5 per address and network (an IPv4 address or an IPv6 /64), 20 per network and 30 per address an hour. 5 tries each. Agent registrations: 10 per network an hour.
exec output is capped at 1 MiB per stream, its stdin at 1 MiB, and the timeout is up to 1 hour. Up to 8 commands run at once per sandbox (run long ones in the background).
A hard lifetime of up to 30 days, and auto-delete up to 365 days after a stop.
Up to 50 public URLs per sandbox, 100 live viewer tokens per URL, and 20 new URL names a day per account (each new name gets its own certificate).
Stored command output is kept 90 days, up to 512 MiB per account (the oldest goes first). Process samples are kept 7 days.
The pre-stop hook gets 60 seconds.
Abuse such as crypto mining, spam or network scanning gets accounts suspended. So does a payment that's disputed or reported as fraudulent, at once: API keys stop working and sandboxes are stopped, with their disks kept.