# Together Code Sandbox (slim)

> Together AI's hosted virtual machine sandboxes for running commands and code, built from Docker-image snapshots and driven from the together-sandbox Python SDK, TypeScript SDK or CLI. Access is by allowlist, on request to Together.

- Full: https://www.anchorterminal.com/tools/together-code-sandbox.md (~7,650 tokens) · this version ~1,580 tokens · JSON https://www.anchorterminal.com/tools/together-code-sandbox.json · canonical https://www.anchorterminal.com/tools/together-code-sandbox
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-09

**D · 53.6/100 · rank #628 of 842 · #12 in Code execution sandboxes · not agent-ready · confidence medium**


Assessment: Two public OpenAPI documents, MIT clients for Python and TypeScript, cursor pagination and built-in retries make the surface easy for an agent to drive. Access is the limit. Together enables the SDK per organisation on request, publishes no rate limits or SLA, and neither status page names the sandbox service.

## Facts

- Kind: HTTP API · vendor: Together AI · category: Code execution sandboxes · legal entity: Together Computer, Inc. · provenance 77/100
- Endpoint: `https://api.bartender.codesandbox.io` (HTTP)
- Auth: API key · pricing: Pay per use · x402: no · licence: Proprietary service under Together's terms of service. The SDKs, CLI and OpenAPI documents on GitHub are MIT
- Probe metrics: not measured yet (probes haven't run)
- Access: Allowlist. Together enables the SDK and CLI per organisation on request
- Clients: `together-sandbox` 4.1.1 on PyPI (async, Python 3.10 or later) and npm (Node.js 18 or later), and a `together-sandbox` CLI installed as a self-contained binary, all MIT
- APIs: Management API (OpenAPI 3.1.0, 17 operations, `/v1` at api.bartender.codesandbox.io) for sandboxes, snapshots and aliases. In-VM API (OpenAPI 3.0.3, 25 operations) for files, directories, execs and ports
- Sizes: Default 1 vCPU and 2 GiB. `cpu` from 0.1 to 16 cores and 1 to 8 GB of memory per core, fixed at creation
- Lifetime: Runs until terminated unless `ttl` (seconds from creation) is set. No idle detection, and a terminated sandbox can't restart
- Persistence: Ephemeral by default. A termination policy or `terminate(snapshot=...)` saves disk, or disk and memory, as a snapshot aliased `sandbox:<id>`
- Images: Snapshots built by Together's remote image builder from a public Docker image or a Dockerfile context. No default image
- Network: All ports public by default. Experimental inbound allowlist by port, IP or CIDR with an optional `X-Sandbox-Token` requirement. No outbound rules
- Retries: SDKs retry 408, 429, 500, 502, 503 and 504 three times with exponential backoff from 0.5 seconds. `snapshots.create` is not idempotent
- Rate limits: None found. The migration guide says the concurrency count and limit are not exposed
- Status: No sandbox component on status.together.ai or status.codesandbox.io
- Prices: vCPU $0.0446 per vCPU-hour; Default sandbox (1 vCPU, 2 GiB) $0.0744 per session-hour

- Scores: Reliability 25, Performance pending, Schema & documentation 86, Agent ergonomics 70, Security & auth 47, Payments & pricing 20, Task success pending, Maintenance & community 83, Transparency & trust 60 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines. · Schema & documentation, Two public OpenAPI documents in the repository and on GitHub Pages, the management API (3.1.0, 17 operations) and the in-VM API (3.0.3, 25 o… · Agent ergonomics, List calls take `limit` from 1 to 100, batch reads take IDs and exec output can be read from a `lastSequence`. · Security & auth, Project-scoped API keys, revocable, with optional expiry and no finer scopes. · Payments & pricing, No x402, MPP or L402 found (0). · Maintenance & community, `together-sandbox` 4.1.1 on npm and PyPI on 7 October 2026 (30). · Transparency & trust, A closed service under Together's terms of service (19 May 2026), with the SDKs, CLI and OpenAPI documents under MIT (20).
- Sources: 24, open questions: 8, both in the full twin
- Capabilities: sandbox.code, sandbox.fs, sandbox.persist
- JSON: https://www.anchorterminal.com/api/v1/tools/together-code-sandbox.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/together-code-sandbox.svg` or a link to https://www.anchorterminal.com/tools/together-code-sandbox from a page on together.ai or one of its subdomains, or the README of github.com/togethercomputer/together-sandbox, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Confirm the organisation is on Together's allowlist before installing. A valid `TOGETHER_API_KEY` alone is not enough
2. Build a snapshot first with `snapshots.create`. No default image exists, and every sandbox needs `snapshot_id` or `snapshot_alias`
3. Set `ttl` at creation or call `terminate()`. Nothing stops a sandbox otherwise, and closing the Python client leaves it running
4. Store the snapshot alias, not the sandbox ID. A terminated sandbox can't restart, and its state lives at `sandbox:<id>`
5. Exclude `snapshots.create` from retries with `should_retry`, and set `experimental.network_policy` before serving anything private on a port

## Connect

```bash
pip install together-sandbox  # or npm install together-sandbox
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/together-code-sandbox

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Microsoft Execution Containers | BB | 76.3 | sandbox.code, sandbox.fs, sandbox.persist | https://www.anchorterminal.com/tools/microsoft-execution-containers.min.md |
| Modal Sandboxes | BB | 75.5 | sandbox.code, sandbox.fs, sandbox.persist | https://www.anchorterminal.com/tools/modal-sandboxes.min.md |
| Vercel Sandbox | B | 69.6 | sandbox.code, sandbox.fs, sandbox.persist | https://www.anchorterminal.com/tools/vercel-sandbox.min.md |
| E2B | B | 68.3 | sandbox.code, sandbox.fs, sandbox.persist | https://www.anchorterminal.com/tools/e2b.min.md |
| Cloudflare Sandbox SDK | B | 67.5 | sandbox.code, sandbox.fs, sandbox.persist | https://www.anchorterminal.com/tools/cloudflare-sandbox-sdk.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)