attach_sandbox_object_storage
ChatGPTGive an existing sandbox access to the user's private object storage. Adds the storage gateway address and an expiring, storage-only token to the sandbox environment (SANDBOX_STORAGE_ENDPOINT and SANDBOX_STORAGE_TOKEN). A running sandbox restarts once to pick them up, which ends its running processes; an instant sandbox also loses the files in its disposable workspace. No cloud or infrastructure credentials are placed in the sandbox.
cancel_automation_run
ChatGPTRequest cancellation and terminate a running scheduled command on a best-effort basis.
cancel_sandbox_job
ChatGPTPrevent a queued one-shot job from starting; cancel a running attempt by run ID instead.
create_gpu_sandbox
ChatGPTCreate an isolated one-GPU ATL sandbox. Call list_gpu_types and list_sandbox_environments first, then select gpu_type and a GPU image alias. This waits briefly, but GPU capacity can take several minutes to schedule when autoscaling starts from zero. If ready is false, keep calling wait_for_sandbox until it is true, then use run_python to verify torch.cuda or run_command with nvidia-smi. Use security_profile=developer when apt-get must install system packages; it adds only the package-manager capability set, and accepts any public image when developer_public_images is true. l4-3gb requires startup_class=instant and uses disposable storage with no checkpoint, automatic save, or restart after capacity loss. Lower-cost interruptible capacity is preferred with standard-capacity fallback.
create_persistent_storage
ChatGPTCreate encrypted persistent storage owned by the authenticated user.
create_sandbox
ChatGPTCreate a CPU sandbox using an administrator-approved environment image. Call list_sandbox_environments, then set image to an advertised CPU alias. Use restricted by default, or developer to permit apt-get with a limited capability set; when developer_public_images is listed as true, developer also accepts any public container image. Runtime system-package installs are ephemeral. Set memory_gib to reserve more memory; it is a fixed reservation, not a burst ceiling. startup_class=durable keeps the current encrypted persistent workspace. startup_class=instant uses a disposable workspace on platform-selected capacity, with no persistent attachment, checkpoint, automatic object save, or automatic restart after infrastructure loss. Scheduled jobs can recreate it and retry infrastructure failures. Use the provided tenant-scoped object storage gateway explicitly for any files that must survive. Creation waits briefly; if ready is false, call wait_for_sandbox until it is true.
create_sandbox_automation
ChatGPTCreate a restricted SandboxSchedule or desired-state SandboxController. Exec schedules may start a stopped sandbox, wait for readiness, and clean it up after the run. Durable sandboxes retain persistent storage; instant sandboxes delete their disposable runtime. Instant exec schedules retry infrastructure failures in a fresh sandbox up to max_attempts. Nonzero command exits are application results and are not retried. Infrastructure placement, identity, storage, network, and security fields are not accepted.
delete_deployed_app
ChatGPTDelete a production copy and its private route without modifying the development sandbox.
delete_persistent_storage
ChatGPTPermanently delete named persistent storage after exact confirmation; default storage cannot be deleted.
delete_sandbox
ChatGPTDelete sandbox compute. Instant workspace data is discarded with its Pod.
delete_sandbox_automation
ChatGPTDelete one tenant-owned virtual automation without deleting its sandbox.
delete_sandbox_job
ChatGPTDelete a terminal one-shot job record; associated run history expires independently.
delete_sandbox_keep_storage
ChatGPTDelete sandbox compute after confirmation while retaining independently managed persistent and object storage. Sandboxes can share named tenant storage, including the default workspace. Delete non-default storage only with delete_persistent_storage after all sandbox references have been removed. Default storage is never deleted.
deploy_sandbox_app
ChatGPTPublish an app from a sandbox as a production copy on a public URL that anyone can open. Optionally runs build_command in the source sandbox first (it can change files there), packages source_path, and starts the app in a separate restricted sandbox. Remove the public deployment with delete_deployed_app. build_command runs from build_path, which defaults to source_path. Set build_path=/workspace when a build creates source_path as its output directory. Each production replica downloads the immutable release from tenant-isolated object storage into its disposable /workspace.
disable_sandbox_app
ChatGPTRemove a temporary public route without stopping or modifying the development sandbox.
download_object_artifact
ChatGPTReturn one tenant-scoped object as an MCP file reference that ChatGPT can download. Use this after list_object_artifacts or save_workspace_file_to_object_storage when the user asks to receive a generated file in the conversation. The reference grants temporary read-only access to exactly one object.
download_workspace_artifact
ChatGPTReturn a workspace file as a downloadable ChatGPT artifact in one operation. Use this when the user asks to receive a generated file. workspace_path may be relative to /workspace or an absolute /workspace path. The file is copied to tenant-isolated object storage and exposed through a temporary, read-only reference; sandbox credentials and raw base64 are never returned.
expose_sandbox_app
ChatGPTTemporarily expose one port of a running sandbox through a random public HTTPS hostname.
get_automation_run
ChatGPTRead one tenant-owned automation run and its bounded output.
get_billing_account
ChatGPTReturn this authenticated user's plan, limits, and prepaid compute balance.
get_checkpoint_operation
ChatGPTPoll an asynchronous checkpoint or restore request until phase is Completed or Failed.
get_command_result
ChatGPTPoll a long-running run_command or run_python request without replaying it.
get_sandbox
ChatGPTInspect one sandbox without waiting. To wait for startup, call wait_for_sandbox instead.
get_user_database
ChatGPTReturn the authenticated tenant's PostgreSQL status without exposing database credentials.
list_automation_runs
ChatGPTList bounded execution history for the authenticated tenant.
list_gpu_types
ChatGPTList GPU models and memory sizes available for new GPU sandboxes. The response intentionally describes GPU capabilities without exposing backing infrastructure.
list_object_artifacts
ChatGPTList this sandbox's artifacts in tenant-scoped object storage.
list_object_storage
ChatGPTList the authenticated user's private object directory.
list_persistent_storage
ChatGPTList only the authenticated user's persistent storage and attachment state.
list_public_apps
ChatGPTList temporary previews and production copies owned by the authenticated user.
list_sandbox_automations
ChatGPTList only the authenticated tenant's virtual schedules and controllers.
list_sandbox_environments
ChatGPTList environment aliases and the image sources accepted by sandbox creation. Pass an alias, or any image reference from a trusted source (for example "python:3.13-slim" or "mathworks/matlab:r2026b"), as image to create_sandbox or create_gpu_sandbox. When developer_public_images is true, security_profile=developer also accepts any public image.
list_sandbox_jobs
ChatGPTList the authenticated tenant's retained one-shot job records.
list_sandboxes
ChatGPTList this user's ATL sandboxes and their lifecycle state.
publish_static_website
ChatGPTPublish an object directory as an immutable public static website release. The source must contain index.html. Publishing copies only this tenant's bounded source directory to a separate private origin. Returned URLs always include index.html.
read_object_storage_text
ChatGPTRead a bounded UTF-8 object from the authenticated user's private object directory.
read_object_text_artifact
ChatGPTRead a UTF-8 artifact from this user's server-enforced object directory.
read_workspace_file
ChatGPTRead a UTF-8 artifact from the user's persistent workspace.
register_user
ChatGPTRegister the authenticated user and provision isolated workspace and object storage.
run_command
ChatGPTRun a command. Long commands return a request_id that can be polled with get_command_result.
run_python
ChatGPTRun Python. Long commands return a request_id that can be polled with get_command_result.
save_workspace_file_to_object_storage
ChatGPTCopy a bounded non-secret file to object storage and return it to ChatGPT. workspace_path may be relative to /workspace or an absolute /workspace path. The returned temporary, read-only file reference avoids requiring a second download tool call. Never copy credentials or tokens.
scale_deployed_app
ChatGPTSet the number of identical EBS-free production replicas serving an application.
set_sandbox_automation_enabled
ChatGPTPause or resume one tenant-owned automation using optimistic concurrency.
start_sandbox
ChatGPTStart a stopped sandbox, waiting briefly for it. If ready is false, call wait_for_sandbox until it is.
stop_sandbox
ChatGPTStop compute. Instant workspace data is intentionally discarded.
submit_sandbox_job
ChatGPTSubmit an immediate one-shot command against an instant sandbox. The worker starts a fresh disposable Pod, executes asynchronously, retries only infrastructure failures, and deletes the Pod after completion. Poll list_automation_runs for output and status.
wait_for_sandbox
ChatGPTWait up to about 40 seconds for a starting sandbox to become ready. Use this after create or start returns ready=false. While the sandbox is still starting it returns ready=false with a next_action, and calling it again continues waiting. A GPU sandbox can take up to 10 minutes to start, which is expected rather than a failure.
write_object_storage_text
ChatGPTCreate or overwrite UTF-8 content in the user's private object directory. Never include credentials.
write_object_text_artifact
ChatGPTWrite non-secret UTF-8 text to tenant-scoped storage. Never include credentials or tokens.
write_workspace_file
ChatGPTCreate or overwrite a UTF-8 artifact in the user's workspace. Never include credentials.