# EndpointCredential


[API catalog](/reference/api/) · [Docker Sandboxes overview](/reference/api/sandboxes/latest/) · [Product manual](https://docs.docker.com/ai/sandboxes-api/) · [OpenAPI specification](/reference/api/sandboxes/api.yaml)

API version: v1


> This API is experimental. Features, interfaces,
> and behavior may change.




Schema constraints and annotations:

```json
{
  "description": "EndpointCredential is returned once with Cache-Control: no-store; never log its token.",
  "properties": {
    "audience": {
      "minLength": 1,
      "type": "string"
    },
    "expireTime": {
      "$ref": "#/components/schemas/Timestamp"
    },
    "permissions": {
      "description": "Allowed values: sandboxesExec, sandboxesFilesRead, sandboxesFilesWrite.",
      "items": {
        "$ref": "#/components/schemas/Permission",
        "enum": [
          "sandboxesExec",
          "sandboxesFilesRead",
          "sandboxesFilesWrite"
        ]
      },
      "minItems": 1,
      "type": "array",
      "uniqueItems": true
    },
    "sandbox": {
      "pattern": "^sandboxes/[^/]+$",
      "type": "string"
    },
    "token": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "token",
    "expireTime",
    "permissions",
    "sandbox",
    "audience"
  ],
  "title": "EndpointCredential",
  "type": "object"
}
```