If your organization uses Forge Dedicated Cloud, authenticate sandboxes on serverless capacity with an API key from your dedicated instance instead of wandb.ai. The Python client sends your key and instance hostname to the CoreWeave Sandboxes service, which validates the key against your instance. Pass your instance hostname with the key to select the correct instance for authentication.
Before you begin
You need the following:
- Sandbox access enabled for your Forge Dedicated Cloud instance. Contact your Forge account team to confirm that your instance has the required server updates and to request access.
- The URL of your Forge Dedicated Cloud instance, for example
https://[INSTANCE].wandb.io. The hostname must end in .wandb.io. Instances on custom domains aren’t supported.
- Python 3.11 or newer.
Forge Self-Managed deployments, including air-gapped installations, aren’t supported. The TypeScript client doesn’t support Dedicated Cloud instances yet, so use the Python client.
Get an API key from your instance
Create a personal API key on your dedicated instance, not on forge.coreweave.com/settings#apikeys:
- Sign in to your Forge Dedicated Cloud instance.
- Click your user profile icon, then click User Settings.
- Scroll to the API Keys section and create a key.
Forge shows the full key only once, when you create it. For more information, see How do I find my API key? in the Forge documentation.
The key must be a personal (user) API key. Other Forge credential types are rejected.
Configure instance authentication
Install the Python client:
Set your instance hostname and API key. Replace [INSTANCE] with your instance’s hostname prefix and [FORGE-API-KEY] with the key you created:
The example passes the hostname in the x-wandb-host header. Use the hostname without https:// or a path. The Sandbox API endpoint stays unchanged.
Run a sandbox
Pass the key and dedicated instance hostname through AuthHeaders:
If the command succeeds, Hello! appears in the output.
If authentication fails, confirm that FORGE_HOST matches the instance where you created the key. A key from a dedicated instance doesn’t authenticate against wandb.ai, and a wandb.ai key doesn’t authenticate against a dedicated instance.
Next steps
Last modified on October 14, 2026