> ## Documentation Index > Fetch the complete documentation index at: https://docs.aireserve.com/llms.txt > Use this file to discover all available pages before exploring further. # List sandbox endpoints > Lists authenticated public endpoints for one sandbox. Credentials are never repeated. Requires compute `manage` access. ## OpenAPI ````yaml /api-reference/openapi.json get /v1/sandboxes/{id}/endpoints openapi: 3.0.3 info: title: AI Reserve Gateway API description: >- The AI Reserve API surface — inference, durable environments, workspaces, sandboxes, executions, agent runs, GPU infrastructure, and fine-tuning — all behind one endpoint and one API key. version: 1.0.0 servers: - url: https://api.aireserve.com security: - bearerAuth: [] tags: - name: Customers description: >- Per-end-customer usage, cost, and billable amounts for organizations that tag requests with their own customers. - name: Dedicated GPU endpoints description: >- OpenAI-compatible inference on your organization's own dedicated HuggingFace vLLM deployments, called with an ordinary AI Reserve API key. GPU time is billed from the wallet; requests add no per-token charge. - name: GPU Infrastructure description: >- Provision and manage provider-hidden GPU instances. The recommended Instances API accepts workload requirements and an hourly price ceiling; AI Reserve handles provider placement internally. Every mutation is asynchronous and returns an operation to poll. - name: Environments description: Immutable, versioned runtime definitions. - name: Workspaces description: Durable project storage pinned to one environment version. - name: Sandboxes description: >- Ephemeral provider-disclosed compute allocated from sealed quotes. Requests remain provider-neutral. - name: Executions description: Durable asynchronous operations and command, service, or agent executions. - name: Agent Runs description: Durable Agent SDK runs with replayable events and external artifacts. - name: Customer keys description: >- Mint, list, and revoke API keys pinned to your own end customers (and their organizations), so spend splits per customer without per-request tagging. - name: AWS CLI login description: >- Browser-authorization endpoints consumed by `aws login --profile …` (AWS CLI v2.32.0+). All three routes are unauthenticated — the caller has no credential until `/v1/token` succeeds. - name: Fine-tuning description: >- Fine-tune open models on your own data. Data lives in an S3 bucket inside your organization's AWS hub account; you name a base, LoRA or full, a price ceiling and how the result must be servable, and AI Reserve places the run on a backend internally. The result is a model in your bucket you can deploy or download. - name: 'Admin: Catalog' description: Discover the operations available to this token. - name: 'Admin: Analytics' description: Usage, spend and attribution reads. - name: 'Admin: API Keys' description: Organization and team inference keys. - name: 'Admin: Billing' description: Wallet, ledger and invoice reads. - name: 'Admin: Compute' description: GPU machines and persistent storage (quote, launch, inspect, stop). - name: 'Admin: Compute Runtime' description: >- Portable environments, workspaces, sandboxes, executions, operations and durable agent runs. - name: 'Admin: Containers' description: The organization's AWS account, ECS services, logs and secrets. - name: 'Admin: Files' description: Organization shared files. - name: 'Admin: Members' description: 'People in the organization: invite, profile, team, access, role.' - name: 'Admin: Models & Routing' description: Model availability, defaults, fallbacks and routing. - name: 'Admin: Organization' description: Retention, logging, branding, sign-in domains, classification. - name: 'Admin: Personal' description: The caller's own usage, budget, API keys and preferences. - name: 'Admin: Teams & Budgets' description: Teams, spend caps and allocations. - name: 'Admin: Training' description: Fine-tuning datasets, runs, models and deployments. paths: /v1/sandboxes/{id}/endpoints: get: tags: - Sandboxes summary: List sandbox endpoints description: >- Lists authenticated public endpoints for one sandbox. Credentials are never repeated. Requires compute `manage` access. operationId: listSandboxEndpoints parameters: - name: id in: path required: true schema: format: uuid type: string - name: cursor in: query required: false description: Opaque cursor from the previous page's `nextCursor`. schema: type: string minLength: 1 maxLength: 2048 - name: limit in: query required: false description: Maximum resources to return. Defaults to 50. schema: type: integer minimum: 1 maximum: 100 responses: '200': description: OK. headers: {} content: application/json: schema: $ref: '#/components/schemas/EndpointList' '400': description: >- Invalid request, malformed event cursor, missing Idempotency-Key, or schema violation. content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' '401': description: Missing or invalid API key. content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' '403': description: The key lacks compute `manage` access. content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' '404': description: Resource not found or owned by another organization. content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' '429': description: Rate limit exceeded. headers: Retry-After: description: Whole seconds before the caller should retry. schema: type: integer minimum: 1 content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' '500': description: Unexpected control-plane error (`internal_error`). content: application/json: schema: $ref: '#/components/schemas/ComputeRuntimeError' security: - bearerAuth: [] - apiKeyAuth: [] components: schemas: EndpointList: type: object properties: object: type: string enum: - list data: type: array items: type: object properties: id: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ object: type: string enum: - endpoint workspaceId: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ sandboxId: type: string format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ name: type: string minLength: 1 maxLength: 120 protocol: type: string enum: - https - wss - tcp status: type: string enum: - provisioning - ready - revoked - failed url: nullable: true type: string format: uri auth: type: object properties: mode: type: string enum: - bearer - mtls expiresAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ required: - mode - expiresAt additionalProperties: false expiresAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ lastUsedAt: nullable: true type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ revokedAt: nullable: true type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ error: nullable: true type: object properties: message: type: string minLength: 1 maxLength: 4096 type: type: string enum: - invalid_request_error - authentication_error - permission_error - not_found_error - conflict_error - rate_limit_error - api_error param: nullable: true type: string maxLength: 255 code: type: string enum: - invalid_request - authentication_failed - permission_denied - not_found - idempotency_conflict - invalid_state - unsupported_action - quote_expired - quote_mismatch - quote_consumed - no_capacity - insufficient_funds - operation_conflict - rate_limit_exceeded - provider_unavailable - internal_error details: type: object additionalProperties: {} required: - message - type - param - code additionalProperties: false createdAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ updatedAt: type: string format: date-time pattern: >- ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:Z|([+-](?:[01]\d|2[0-3]):[0-5]\d)))$ required: - id - object - workspaceId - sandboxId - name - protocol - status - url - auth - expiresAt - lastUsedAt - revokedAt - error - createdAt - updatedAt additionalProperties: false nextCursor: nullable: true type: string minLength: 1 maxLength: 2048 required: - object - data - nextCursor additionalProperties: false ComputeRuntimeError: type: object properties: error: type: object properties: message: type: string minLength: 1 maxLength: 4096 type: type: string enum: - invalid_request_error - authentication_error - permission_error - not_found_error - conflict_error - rate_limit_error - api_error param: nullable: true type: string maxLength: 255 code: type: string enum: - invalid_request - authentication_failed - permission_denied - not_found - idempotency_conflict - invalid_state - unsupported_action - quote_expired - quote_mismatch - quote_consumed - no_capacity - insufficient_funds - operation_conflict - rate_limit_exceeded - provider_unavailable - internal_error details: type: object additionalProperties: {} required: - message - type - param - code additionalProperties: false required: - error additionalProperties: false description: OpenAI-shaped error envelope returned for every JSON error response. securitySchemes: bearerAuth: type: http scheme: bearer description: >- Your AI Reserve API key (aireserve_api_…) from the API Keys page in the portal (https://portal.aireserve.com/keys). apiKeyAuth: type: apiKey in: header name: x-api-key description: The same API key sent as an `x-api-key` header. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.