Terminal and Python sandbox tools
Run Python in a limited sandbox, with button approval for risky code.
- On or off by default
- on
- Who can switch it
- agent on request
- Why it is a group
- Tools with the same purpose and risk are switched together, so the model sees fewer tools.
- Number of tools
- 6
Typical uses
- Run a short calculation
- Parse a CSV the user saved
- Install a package in the sandbox venv (needs approval)
Risks
The builtin sandbox is a limited subprocess, not a container or VM.
In this section
start_new_terminalCreates a named terminal session for run_code.run_codeRuns Python in the sandbox. Risky code waits for button approval.get_resultsReturns the last results of a terminal.set_terminal_lifecycleKill, keep alive or clear history of a terminal.list_terminalsLists open terminals.reset_sandbox_venvDeletes the sandbox virtual environment.
See also:start_new_terminalrun_codeTools
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.