CoreWeave Serverless sandboxes are in public preview.
Prerequisites
Before you begin, you need the following:- A W&B API key for sandbox access. These examples use W&B authentication. For other credentials, see Choose a credential.
- Access to a model through W&B Serverless Inference or another OpenCode provider. Provider access and billing are separate from sandbox access.
- A public repository URL. Private repositories require Git credentials inside the sandbox.
cws-agentinstalled by following its installation instructions.
[WANDB-API-KEY] with your full W&B API key:
CWSANDBOX_API_KEY to make cws-agent select W&B authentication.
Launch OpenCode with cws-agent
Usecws-agent to install OpenCode in a sandbox, clone your repository into
the /workspace/project directory, and configure a snapshot mount for
file system snapshots.
Choose one of the following provider options. Replace [SANDBOX-NAME] with a
session name containing 1 to 40 lowercase letters, digits, or hyphens. Start the
name with a letter or digit. Replace [REPOSITORY-URL] with your public repository URL.
Use W&B Serverless Inference (recommended)
W&B Serverless Inference is the preferred provider for this guide. You can use it to access hosted open models with the same W&B credential used for sandbox access. You can use any model and provider supported by OpenCode instead. Follow Use another model provider. Complete the W&B Serverless Inference prerequisites, including a W&B project, and check your available inference credits. This example selects GLM 5.2 explicitly:--wandb preset configures W&B’s inference endpoint, forwards
WANDB_API_KEY into the sandbox, and limits OpenCode to that provider. The agent
can use this key for both inference and sandbox access. To choose a different
W&B model, replace zai-org/GLM-5.2 with an ID from the
available models list.
Use another model provider
To use another provider, omit--wandb and --wandb-model when you create the
sandbox. Export that provider’s API key locally. For example, choose one of
these alternatives and replace the key placeholder:
- Anthropic
- OpenAI
[PROVIDER-ID]/[MODEL-ID] in both fields with your OpenCode model
identifier, using the anthropic/ or openai/ provider prefix as appropriate.
The small_model field selects the model for lightweight tasks such as title
generation. See OpenCode models.
cws-agent forwards ANTHROPIC_API_KEY and OPENAI_API_KEY.
For providers whose keys aren’t forwarded automatically, follow their
OpenCode provider configuration and use
--env-passthrough [VARIABLE-NAME] for additional environment variables.
Both launch options print session ready. after setup. --detach leaves the
sandbox running without opening the terminal interface or importing local
skills and Model Context Protocol (MCP) configuration. The 2-hour lifetime is a
wall-clock limit, including setup. Stop compute when you finish.
Run a task and check the result
From your local terminal, ask OpenCode to write and read a file:--permission-mode native
keeps OpenCode’s configured permissions. Without it, cws-agent defaults to
accepting approval requests. If your OpenCode policy requires approval for the
task, use an interactive session to approve it. See
OpenCode permissions.
Check the actual file independently of the agent’s response:
Hello from CoreWeave. Before you stop compute, retrieve
a local copy:
Optional: Work interactively
From an interactive terminal on macOS or Linux, open OpenCode in the same workspace:--no-config-sync flag skips local skills and MCP imports. Send prompts and
approve actions in OpenCode, then use /exit to return to your local terminal.
When you exit OpenCode, the sandbox continues to run. Repeat the connection
command to open OpenCode again. It doesn’t automatically select a previous conversation.
For conversation history and resume commands, see
cws-agent sessions.
Save, stop, and restore
After the agent finishes, snapshot the workspace and stop compute:down saves the /workspace directory before stopping the sandbox. If the snapshot fails,
the sandbox remains running. Inspect the error and retry after resolving it.
To stop without waiting for an explicit snapshot, run:
WANDB_API_KEY is
still exported in your local terminal, then run:
--wandb-model value you launched with. If you omit it while using
--wandb, restore selects the preset’s default model.
For another provider, re-export its key and OPENCODE_CONFIG_CONTENT, then run:
sandbox-proof.txt file survived. Continue with
cws-agent run or the interactive connection command. Stop the restored sandbox
with cws-agent down when you finish.
Troubleshoot
If setup or a task fails, use the following checks:- Sandbox authentication fails: Check the full W&B API key and your sandbox access.
- W&B model requests fail: Check inference access, credits, and the model ID. Sandbox access alone doesn’t establish inference access.
- Another provider isn’t available: Start a new session without
--wandb. The W&B preset is saved in the workspace, so omitting--wandbon restore doesn’t remove it. For an existing workspace, see W&B preset configuration. - A headless task needs approval: Connect interactively and use OpenCode’s approval prompts before continuing.
Next steps
For more information, see these guides:- Run agents on CoreWeave sandboxes explains agent execution models and workspace lifetimes.
- OpenCode configuration covers model, provider, and project settings.
- Use the Sandbox SDK explains how to manage command execution directly from your application.