Skip to content
Workbox

Discover, don’t declare.

One command your agent learns on its own. Thirteen subcommands, each with built-in help.

Ask wb what it can do.

Try wb tools or wb help ask.

inside the box — wb 0.1.0-alpha.1interactive preview

# Type a command or pick one below.

What the box can’t do, the host does. Checked and logged.

Every call, verified by the host.

wb checkpoint create --name before-migrate
sandbox
wbagent process
runner.sock/run/workbox
host
control peerthe host side
schemaprotocol validator
policyrefs, kinds, digests
storeSQLite or artifacts
audithash-chained log

01 / 07

The agent calls wb. wb only talks to the runner.

Thirteen commands. Each one explains itself.

  • wb secret exec <ref>... -- <cmd...> | wb secret list

    Use a secret without storing it in the box.

    accepts --help and --json

Made to be read by a program.

inside the box — agent
$ wb tools --json
{"schema":1,"tools":[{"name":"status","summary":"Sandbox id, boot id, limits, usage and network mode","usage":"wb status [--json]"},…]}
$ wb help nope --json
{"error":{"code":"E_NOT_FOUND","message":"unknown command nope"}}
0
Success
1
Internal error
2
Usage
3
Not found
4
Denied
5
Timeout

Toolchains on demand.

web

Node, pnpm, bun and Chromium

python

Python 3.12 and uv

rust

Stable Rust via rustup

go

Latest stable Go

system

Compilers and build tools

agents

Claude Code and Codex

inside the box — agent
$ wb preset list
$ wb preset install python
$ wb preset install web

Give the agent a shell it can learn.

Start with wb tools.