| name | sandbox |
| description | Execute JavaScript, shell commands, fetch web content, and control a browser |
| sandbox | true |
Sandbox Tools
sandbox_exec
Run JavaScript in isolated VM. Use console.log() for output, return for result. No fetch/require — use sandbox_web_fetch for HTTP.
sandbox_shell
Run shell commands in /tmp with limited permissions (Docker only).
sandbox_web_fetch
Fetch web pages (auto-converted to markdown) or APIs (raw: true).
sandbox_web_search
Search DuckDuckGo. Params: query, num_results.
Browser Tools
Observe → Act → Observe loop. Elements have short refs (e1, e2...) — use them in click/type.
| Tool | Use |
|---|
sandbox_browser_observe | Text snapshot with element refs. Primary verification tool. |
sandbox_browser_navigate | Go to URL, wait for ready, return snapshot |
sandbox_browser_click | Click by ref ("e3") or text ("Submit") |
sandbox_browser_type | Type by ref ("e5"), dispatches input/change events |
sandbox_browser_content | Page as markdown (optional selector) |
sandbox_browser_evaluate | Run JS, reports side effects |
sandbox_browser_screenshot | PNG screenshot (expensive, last resort) |
Best Practices
- Use
sandbox_web_fetch for HTTP — not fetch in sandbox_exec
- Use observe to verify page state — not screenshots
- Use refs from observe output in click/type — don't guess selectors
- Check
sideEffects in evaluate results
