Build
AI workers
A box is a Linux machine with your company's code checked out, where an AI agent (Claude, Codex, Cursor, Grok or your own) runs commands, edits files, opens a private preview and pushes its work. You pay only while a box is awake, by the minute.
What a box is
- Your repository at
/workspace/repo, on the branch you choose (made frommainif it's new). Node 22, Python 3.11 and git are installed; install anything else you need. - It works as the person whose key started it: their pushes, their permissions, their spending limits. Other people can't run commands in it; owners and admins can stop it.
- It stops when it's been idle a while (15 minutes by default), at its time limit, or at its budget. A stopped box's files are gone, so push your work.
Connect an agent (MCP)
In the dashboard, make an API key for yourself under API Keys and switch on AI workers. Then give your agent this MCP server with the key:
URL: https://dashboard.attackdesk.com/api/v1/mcp
Header: Authorization: Bearer atk_…For Claude Code:
claude mcp add --transport http attackdesk https://dashboard.attackdesk.com/api/v1/mcp \
--header "Authorization: Bearer atk_…"The agent gets tools such as start_box, run_command, write_file, open_preview, push and stop_box.
The API
The same actions as plain HTTP, with Authorization: Bearer atk_…. Each counts as one API call.
GET | /api/v1/sandboxes | Your boxes (?all=1: everyone's, for owners and admins) |
POST | /api/v1/sandboxes | Start one: { size, branch, maxMinutes, budget, idleMinutes, label } |
GET | /api/v1/sandboxes/:id | Status, caps, what it has cost, preview links |
POST | /api/v1/sandboxes/:id/exec | Run a command and wait: { command, cwd, timeoutMs } |
POST | /api/v1/sandboxes/:id/processes | Start a background process: { command, cwd } |
GET | /api/v1/sandboxes/:id/processes/:p/logs | A background process's output |
GET | /api/v1/sandboxes/:id/files?path= | List a folder |
GET | /api/v1/sandboxes/:id/files/content?path= | Read a file |
PUT | /api/v1/sandboxes/:id/files/content | Write a file: { path, content } |
POST | /api/v1/sandboxes/:id/previews | A private link to a port: { port } |
POST | /api/v1/sandboxes/:id/push | Commit everything and push the box's branch: { message } |
GET | /api/v1/sandboxes/:id/events | Everything done in the box |
POST | /api/v1/sandboxes/:id/stop | Stop it now |
DELETE | /api/v1/sandboxes/:id | Stop it and remove it from the list |
Who can use it, and the limits
- The key's person needs Create test environments, Spend on environments and Download and pull the code on their Team page; pushing also needs Push and upload code. A company's shared key can't start boxes.
- Every box has a time limit (up to 12 hours) and can have a budget in dollars.
- Company, person and key spending limits apply to every minute, as they do to everything else.
- Boxes at once: Pay as you go 2, $29 5, $79 10, $197 25, $329 50. Ask us if you need more.
- Your keys never enter the box: its access to your code is added on the way out and ends when the box stops.
- Preview links are private addresses on
attackdesk.app. Anyone with the link can open it until the box stops. - Everything done in a box is logged with the key that did it.
What it costs
Per hour awake, charged by the minute. Nothing while a box is stopped.
| Size | Pay as you go | $29 | $79 | $197 | $329 |
|---|---|---|---|---|---|
| Small ¼ CPU, 1 GB memory | 6.5¢ | 4.7¢ | 4.3¢ | 4¢ | 3.8¢ |
| Medium (default) ½ CPU, 4 GB memory | 18¢ | 13¢ | 12¢ | 11¢ | 9.9¢ |
| Large 2 CPU, 8 GB memory | 52¢ | 37¢ | 33¢ | 31¢ | 30¢ |
| X-Large 4 CPU, 12 GB memory | 93¢ | 66¢ | 60¢ | 56¢ | 54¢ |
The AI model your agent thinks with is billed separately: by its own provider, or at our model prices if it runs through AttackDesk. Prices checked 2026-09-27.