Connected systems

Capabilities

The outside systems this sandbox is wired into, and connecting a new one

On this page(11 sections)

Everything this sandbox is connected to
Connect something, or change a connection
Disconnect something
Rename a connection
Replace a stored credential
Re-check one connection
A connection's settings, credentials included
Read a plugin marketplace
Stop suggesting this connection
Sign in to a connection by hand
Mint a one-time code

A capability is a system the agent can reach: a forge account, a chat server, a database, one of your own machines. These routes connect and disconnect them, carry the credential each needs, report whether a connection is live, and drive the interactive parts of a sign-in, including a one-time code.

11 calls. Pick one to open it, or use the list on the right.

GET/capabilitiesEverything this sandbox is connected to

Each connection with its live state, the settings that are safe to show, and the names of the credentials it holds. The values of those credentials are never in the answer, on any route but one.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`capabilities`What this sandbox is connected to	object[]
`id`The connection's id	string
`kind`What sort of thing it is	"devops" \| "monorepo" \| "mcp" \| "service" … (19)
`status`Whether it is working	object
`state`Whether it is live, still coming…	"active" \| "pending" \| "error" \| "inactive"
`detail`What is wrong, in words a…	string
`code`A short marker for that reason,…	string
`config`Its settings, minus anything secret	object
`secrets`Which credentials it holds, by name	string[]
`recommendations`Things worth connecting, worked out from…	object[]
`card`Which connection is being suggested	string
`evidence`What was seen that prompted it:…	string
`reason`The same claim in words, without…	string
`prefill`Settings the scan could read, to…	object

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.list();

POST/capabilitiesConnect something, or change a connectionstream

Writes a connection and streams the work of applying it, because some kinds provision real infrastructure and take a while. Sending an id that already exists edits that connection: this is the edit as well as the create. Since a caller is never shown stored credentials, it marks the ones it is leaving alone and the daemon fills them in, which is the only way to change one setting without retyping a key.

What you send

Field	Type	Where
`when kind is "devops"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "monorepo"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "mcp"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredWhere the tool server answers	string	body
`token`The credential it needs, if any	string	body
`when kind is "service"`	shape	body
`id`required	string	body
`config`required	object	body
`service`requiredWhich service to provision	"signoz" \| "outline" \| "paperless" \| "openproject" … (6)	body
`domain`requiredThe address it should answer on	string	body
`on`requiredWhich machine to put it on	string	body
`expose`requiredHow it should be reachable	string	body
`when kind is "integration"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`requiredWhich outside service's credential to make…	"stripe"	body
`when kind is "cli"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`requiredWhich tool to give the agent	string	body
`when kind is "plugin"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the plugin…	string	body
`ref`A branch, tag or commit to…	string	body
`path`Where inside the repository the plugin…	string	body
`token`A credential for a private repository	string	body
`when kind is "extension"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the extension…	string	body
`ref`requiredThe exact commit to install, in…	string	body
`path`Where inside the repository the extension…	string	body
`token`A credential for a private repository	string	body
`tier`Whether installing this donates credits to…	"free" \| "premium"	body
`registry`Which registry this install came from,…	string	body
`when kind is "ssh"`	shape	body
`id`required	string	body
`config`required	object	body
`when auth is "key"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`privateKey`requiredThe private key, whole	string	body
`when auth is "password"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`password`requiredThe password	string	body
`when kind is "vpn"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "fortinet"`	shape	body
`server`required	string	body
`port`	integer	body
`username`required	string	body
`password`required	string	body
`trustedCert`	string	body
`realm`	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "ipsec"`	shape	body
`server`required	string	body
`presharedKey`required	string	body
`localId`	string	body
`remoteId`	string	body
`username`	string	body
`password`	string	body
`ikeVersion`	"1" \| "2"	body
`pfs`	"on" \| "off"	body
`dhGroup`	"2" \| "5" \| "14" \| "15" … (7)	body
`aggressive`	"on" \| "off"	body
`routedNetworks`	string	body
`autoConnect`	"on" \| "off"	body
`when kind is "exit"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "tor"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "vpngate"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when kind is "docker"`	shape	body
`id`required	string	body
`config`required	object	body
`gpu`	"on" \| "off"	body
`registryMirror`	string	body
`insecureRegistries`	string	body
`addressPool`	string	body
`when kind is "browser"`	shape	body
`id`required	string	body
`config`required	object	body
`platform`required	string	body
`username`	string	body
`password`	string	body
`identity`	string	body
`purpose`	string	body
`openedAt`	string	body
`exit`	string	body
`when kind is "identity"`	shape	body
`id`required	string	body
`config`required	object	body
`email`required	string	body
`password`	string	body
`mailbox`	string	body
`loginUrl`	string	body
`openAccounts`	"on" \| "off"	body
`exit`	string	body
`when kind is "host"`	shape	body
`id`required	string	body
`config`required	object	body
`shell`	"on" \| "off"	body
`write`	"on" \| "off"	body
`screen`	"on" \| "off"	body
`control`	"on" \| "off"	body
`sandboxes`	"on" \| "off"	body
`sandboxRemove`	"on" \| "off"	body
`roots`	string	body
`platform`required	string	body
`when kind is "agent"`	shape	body
`id`required	string	body
`config`required	object	body
`command`required	string	body
`name`	string	body
`env`	string	body
`loginCommand`	string	body
`when kind is "endpoint"`	shape	body
`id`required	string	body
`config`required	object	body
`baseUrl`required	string	body
`protocol`	"openai" \| "anthropic"	body
`apiKey`	string	body
`headers`	string	body
`when kind is "localmodel"`	shape	body
`id`required	string	body
`config`required	object	body
`model`required	string	body
`gpu`	"on" \| "off"	body
`url`	string	body
`context`	"16384" \| "32768" \| "65536" \| "131072" \| "custom"	body
`contextTokens`	integer	body
`when kind is "wallet"`	shape	body
`id`required	string	body
`config`required	object	body
`network`	"eip155:8453" \| "eip155:84532"	body
`address`	string	body
`perPaymentMaxUsd`	string	body
`autoApproveUnderUsd`	string	body
`dailyCapUsd`	string	body
`allow`	string	body
`deny`	string	body

What comes back

Field	Type
`when event is "message"`	shape
`data`	object
`kind`	string
`id`	string
`retry`	number
`when event is "done"`	shape
`data`	unknown
`id`	string
`retry`	number
`when event is "error"`	shape
`data`	unknown
`id`	string
`retry`	number

Try itanswered in this tab

curl

curl -N -X POST "$SANDBOX/capabilities" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"id":"a1b2c3d4","kind":"devops","config":{}}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.add({
  "id": "a1b2c3d4",
  "kind": "devops",
  "config": {}
});

DELETE/capabilities/{id}Disconnect something

Tears a connection down. The kinds that own real infrastructure refuse, because deleting those would be losing data rather than losing a connection.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/capabilities/a1b2c3d4" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.remove({
  "id": "a1b2c3d4"
});

POST/capabilities/{id}/renameRename a connection

Carries everything the old name keyed across with it: a browser profile and its logins, an enrolled machine, an extension's copy of its source. Removing and re-adding would lose exactly the state that made the connection worth keeping. Kinds whose name is part of what they are refuse.

What you send

Field	Type	Where
`id`required	string	address
`to`required	string	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/rename" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"to":"src/server.ts"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.rename({
  "id": "a1b2c3d4",
  "to": "src/server.ts"
});

POST/capabilities/{id}/secretReplace a stored credential

Swaps one connection's key or token for a new one and re-applies it, without touching any of its other settings.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address
`value`requiredThe new credential	string	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/secret" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"value":"…"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.setSecret({
  "id": "a1b2c3d4",
  "value": "…"
});

GET/capabilities/{id}/statusRe-check one connection

Probes a single connection right now, for a screen that wants to refresh one row rather than the whole list.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`state`Whether it is live, still coming…	"active" \| "pending" \| "error" \| "inactive"
`detail`What is wrong, in words a…	string
`code`A short marker for that reason,…	string

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/status" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.status({
  "id": "a1b2c3d4"
});

GET/capabilities/{id}/connectionA connection's settings, credentials included

The one call that hands back stored secrets, so an extension's own backend can dial the service behind a connection. Never answered for a signed-in person: only a machine credential reaches it, and an extension's only if its manifest asked for this route out loud at install time.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`id`The connection's id	string
`kind`What sort of thing it is	string
`config`Its settings exactly as stored, credentials…	object

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/connection" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.connection({
  "id": "a1b2c3d4"
});

POST/capabilities/marketplaceRead a plugin marketplace

Resolves a plugin marketplace source into the list of connections you could install from it.

What you send

Field	Type	Where
`url`requiredThe registry to read	string	body
`token`A credential for a private one	string	body

What comes back

Field	Type
`name`What the registry calls itself	string
`plugins`What it lists, each with the…	object[]
`name`	string
`description`	string
`version`	string
`kind`	"plugin" \| "extension"
`trust`	"verified" \| "listed" \| "blocked"
`trustReason`	string
`securityReview`	object
`sha`	string
`url`	string
`path`	string
`policy`	string
`reviewer`	string
`reviewedAt`	string
`runId`	string
`deterministic`	object
`policy`	string
`scanner`	string
`version`	string
`runId`	string
`admitted`	boolean
`securityFix`	boolean
`tier`	"free" \| "premium"
`category`	string
`art`	string
`logo`	string
`icon`	string
`homepage`	string
`install`	object
`url`	string
`ref`	string
`path`	string
`stars`	integer
`pushedAt`	string
`checks`	object
`sha`	string
`manifest`	string
`bundle`	string
`engines`	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/marketplace" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"url":"https://sandbox-a1b2c3d4e5f6.intentic.dev","token":"ict_9wQ4rTz8kLmN3pXbV7hJ"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.marketplace({
  "url": "https://sandbox-a1b2c3d4e5f6.intentic.dev",
  "token": "ict_9wQ4rTz8kLmN3pXbV7hJ"
});

DELETE/capabilities/recommendations/{card}Stop suggesting this connection

Not needed, for now. Nothing is torn down. The suggestion comes back if what prompted it in the workspace changes, because what is remembered is the evidence, not the refusal.

What you send

Field	Type	Where
`card`requiredWhich suggestion to stop making	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/capabilities/recommendations/%E2%80%A6" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.dismiss({
  "card": "…"
});

POST/capabilities/{id}/loginSign in to a connection by hand

Opens the connection's own sign-in in a terminal a person can type into, for the flows that need a code pasted or a device confirmed. The answer names the terminal to attach to.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`session`The terminal the sign-in is happening…	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/login" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.login({
  "id": "a1b2c3d4"
});

GET/capabilities/{id}/otpMint a one-time code

Generates a single two-factor code from a stored seed. The one credential-adjacent read an agent is allowed, and it is safe because a code expires in seconds and never reveals the seed, so an agent can answer a prompt without ever holding the factor.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`code`The code	string
`secondsRemaining`How long it lasts	number

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/otp" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.otp({
  "id": "a1b2c3d4"
});