Docker Sandbox
Docker Sandbox creates the sandbox on a server of yours running Docker, which NappAI connects to securely with certificates. The agent’s code runs on your infrastructure.
A sandbox is an isolated, temporary computer where an agent can write and run code, install programs or work with files without touching anything else. This component connects to the Sandbox connector of the Deep Agent, which appears when you turn on Enable Sandbox in its advanced options.
When to use it
- Your policies require code and data to be processed on your servers.
- You need the agent to use programs you already prepared in your own image.
- You want to control the memory and CPU each run uses.
Configuration
You need a Docker (mTLS) credential with your server address and its security certificates. See Credentials.
Advanced options
| Field | What it does |
|---|---|
| Docker Image | The sandbox’s starting environment, for example ubuntu:22.04 or python:3.12-slim. It must allow installing programs with apt, like Ubuntu. Default: ubuntu:22.04. |
| Variables De Entorno | Values the agent’s code can read inside the sandbox, such as other services’ keys, written as name and value pairs, for example {"CRM_TOKEN": "..."}. Default: none. |
| Memory Limit | Maximum memory, for example 512m (default) or 1g. Empty, no limit. |
| CPU Limit | Processors it may use, for example 1.0 (default) or 0.5. Empty, no limit. |
Output
The Sandbox Backend output is the sandbox. Connect it to the Sandbox connector of the Deep Agent.
Example
A hospital needs reports to be processed on its servers.
- Create the Docker (mTLS) credential with the details your systems team gives you.
- Add Docker Sandbox and connect it to the Sandbox connector of the Deep Agent, with Enable Sandbox on.
Related components
- Deep Agent: the agent that uses the sandbox.