# SandboxEndpoint


[API catalog](/reference/api/) · [Docker Sandboxes overview](/reference/api/sandboxes/latest/) · [Product manual](https://docs.docker.com/ai/sandboxes-api/) · [OpenAPI specification](/reference/api/sandboxes/api.yaml)

API version: v1


> This API is experimental. Features, interfaces,
> and behavior may change.




Schema constraints and annotations:

```json
{
  "dependentSchemas": {
    "authentication": {
      "allOf": [
        {
          "oneOf": [
            {
              "properties": {
                "authentication": {
                  "properties": {
                    "scheme": {
                      "const": "scopedBearer"
                    }
                  }
                },
                "credentialAudience": {
                  "minLength": 1
                },
                "protocol": {
                  "const": "http"
                }
              },
              "required": [
                "credentialAudience"
              ]
            },
            {
              "properties": {
                "authentication": {
                  "properties": {
                    "scheme": {
                      "const": "localSocket"
                    }
                  }
                },
                "credentialAudience": {
                  "const": ""
                },
                "protocol": {
                  "const": "unixSocket"
                }
              }
            }
          ],
          "required": [
            "protocol"
          ]
        }
      ]
    }
  },
  "description": "SandboxEndpoint tells a client where sandbox endpoint services are served.\nnetwork endpoints require scoped credentials; Unix sockets use actual socket access controls\nsandbox must contain the endpoint's immutable sandbox UID",
  "properties": {
    "apiVersion": {
      "const": "v1",
      "description": "api_version identifies the /v1 endpoint contract before the client connects.",
      "type": "string"
    },
    "authentication": {
      "$ref": "#/components/schemas/EndpointAuthentication"
    },
    "capabilities": {
      "description": "capabilities lists supported public operation IDs, independently of caller grants.",
      "items": {
        "pattern": "^[a-z][A-Za-z0-9]*$",
        "type": "string"
      },
      "minItems": 1,
      "type": "array",
      "uniqueItems": true
    },
    "credentialAudience": {
      "description": "credential_audience is server-controlled and required for network endpoints.",
      "type": "string"
    },
    "protocol": {
      "$ref": "#/components/schemas/SandboxEndpointProtocol",
      "description": "protocol identifies the endpoint transport."
    },
    "sandbox": {
      "description": "sandbox names the immutable sandbox incarnation served by this endpoint.",
      "pattern": "^sandboxes/[^/]+$",
      "type": "string"
    },
    "sandboxUid": {
      "minLength": 1,
      "readOnly": true,
      "type": [
        "string"
      ]
    },
    "uri": {
      "description": "uri is the endpoint API base; preserve its path prefix when appending /v1 routes.",
      "type": "string"
    }
  },
  "required": [
    "sandbox",
    "sandboxUid",
    "apiVersion",
    "capabilities",
    "authentication"
  ],
  "title": "SandboxEndpoint",
  "type": "object"
}
```