Docker Agent

Official documentation: Docker Agent

Quick start

Create a sandbox and run Docker Agent for a project directory:

$ sbx run docker-agent ~/my-project

The workspace parameter defaults to the current directory, so sbx run docker-agent from inside your project works too.

Authentication

Docker Agent supports multiple providers. Store keys for the providers you want to use with stored secrets:

$ sbx secret set openai
$ sbx secret set anthropic
$ sbx secret set google
$ sbx secret set xai
$ sbx secret set nebius
$ sbx secret set mistral
$ sbx secret set openrouter

You only need to configure the providers you want to use. Docker Agent detects available credentials and routes requests to the appropriate provider.

Configuration

Sandboxes don't pick up user-level configuration from your host. Only project-level configuration in the working directory is available inside the sandbox. See Why doesn't the sandbox use my user-level agent configuration? for workarounds.

Default startup command

Without extra args, the sandbox runs:

docker-agent run --yolo

Arguments after -- are added after the default flags when the first one is itself a flag (begins with -). When the first argument is a bare word — such as the run subcommand or a config file — it replaces the defaults, so include run --yolo yourself:

$ sbx run docker-agent -- run --yolo agent.yml

Base image

The sandbox uses docker/sandbox-templates:docker-agent. See Templates to build your own image on top of this base.