If your organization uses W&B Dedicated Cloud, authenticate sandboxes on serverless capacity with an API key from your dedicated instance instead of wandb.ai. The Python client sends your key and instance hostname to the CoreWeave Sandboxes service, which validates the key against your instance. Pass your instance hostname with the key to select the correct instance for authentication.
Before you begin
You need the following:
- Sandbox access enabled for your Dedicated Cloud instance. Contact your account team to confirm that your instance has the required server updates and to request access.
- The URL of your Dedicated Cloud instance, for example
https://[INSTANCE].wandb.io. The hostname must end in .wandb.io. Instances on custom domains aren’t supported.
- Python 3.11 or newer.
W&B Self-Managed deployments, including air-gapped installations, aren’t supported. The TypeScript client doesn’t support Dedicated Cloud instances yet, so use the Python client.
Get an API key from your instance
Create a personal API key on your dedicated instance, not on forge.coreweave.com/settings#apikeys:
- Sign in to your Dedicated Cloud instance.
- Click your user profile icon, then click User Settings.
- Scroll to the API Keys section and create a key.
Your instance shows the full key only once, when you create it. For more information, see How do I find my API key? in the Forge documentation.
The key must be a personal (user) API key. Other credential types are rejected.
Configure instance authentication
Install the Python client:
Set your instance hostname and API key. Replace [INSTANCE] with your instance’s hostname prefix and [WANDB-API-KEY] with the key you created:
The example passes the hostname in the x-wandb-host header. Use the hostname without https:// or a path. The Sandbox API endpoint stays unchanged.
Run a sandbox
Pass the key and dedicated instance hostname through AuthHeaders:
If the command succeeds, Hello! appears in the output.
If authentication fails, confirm that FORGE_HOST matches the instance where you created the key. A key from a dedicated instance doesn’t authenticate against wandb.ai, and a wandb.ai key doesn’t authenticate against a dedicated instance.
Next steps
Last modified on October 19, 2026