Prototype, validate, replay, dry-run, and debug code, MCP calls, API requests, OpenAPI-generated tests, webhook payloads, and schemas before they affect production.
Real execution where supported, explicit degraded states where infrastructure is not configured.
Create public-safe sandbox drafts, edit files, and run bounded commands without user auth.
Browse Sandbox MCP tools publicly and execute public-safe JSON-RPC tool tests with trace-linked results.
Use Vercel Sandbox provider execution when configured, with honest degraded states when provider APIs are unavailable.
Send real trusted-domain API checks, import JSON OpenAPI specs, and generate tests from real paths.
Persist provider-backed workspaces, export/import local drafts, and preserve public-safe reports.
Keep provider tokens server-side, redact secrets, enforce command/file/network policies, and hash JA4 metadata publicly.
Integrations stay separate from Sandbox identity and are reported as live or degraded honestly.
Create, edit, save locally, export, and run bounded public-safe tests without user auth.