Agents

Automations

Work the sandbox starts on its own, and the approvals it parks waiting for you

On this page(11 sections)

Things that wake an agent on their own
Create or edit an automation
What can trigger an automation here
Turn an automation on or off
Delete an automation
Rotate an automation's webhook token or intake key
Fire an automation by hand
Who has written to a listener source
Automations waiting for a yes
Let a held automation run
Drop a held automation

Scheduled and triggered work: what can trigger one here, what is configured, and switching one on or off, deleting it or firing it by hand. The other half is the approval queue — an automation set to ask first lands there each time it would have run.

11 calls. Pick one to open it, or use the list on the right.

GET/automationsThings that wake an agent on their own

Every automation with its recent runs and when it fires next.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`automations`	object[]
`id`The automation's id	string
`trigger`What sets it off: a schedule,…	object
`when kind is "schedule"`	shape
`cron`When, in cron notation	string
`tz`Which clock the times in the…	string
`afterSessions`Fire only once at least this…	integer
`when kind is "once"`	shape
`at`The moment it fires, in milliseconds	integer
`when kind is "event"`	shape
`dailyMax`How many webhook calls a day…	integer
`when kind is "listener"`	shape
`provider`Which service to listen to	string
`channelId`Narrow it to one channel or…	string
`eventType`Narrow it to one kind of…	string
`mentioned`Only when the agent is actually…	boolean
`branch`Narrow it to one branch, for…	string
`allowedOrigins`Which websites may reach the public…	string[]
`when kind is "workspace"`	shape
`event`Which happening	"turn.settled" \| "agent.landed" \| "deps.broken" \| "deps.fixed"
`repo`Narrow it to one repository	string
`guard`A command run before the wake…	string
`prompt`What the woken agent is told	string
`webchat`Settings for the public chat widget,…	object
`access`Who may write to it	"public" \| "google"
`requireName`Ask a visitor for a name…	boolean
`antiBot`How to keep bots out: a…	"turnstile" \| "pow"
`turnstileSiteKey`The public half of those keys,…	string
`turnstileSecret`The private half, which the sandbox…	string
`googleClientId`The site's own sign-in client id	string
`title`	string
`greeting`	string
`accent`	string
`position`	"top-right" \| "top-left" \| "bottom-right" \| "bottom-left"
`dailyMessageMax`	integer
`conversationMessageMax`	integer
`sessionTtlMinutes`	integer
`issues`Settings for the bug reporter, for…	object
`keyFromBrowsers`Let a browser report with the…	boolean
`dailyReportMax`How many reports a day this…	integer
`escalateAfter`How many more times a known…	integer
`antiBot`Make a person's browser solve a…	"pow"
`title`The dialog's heading	string
`prompt`The line above the box they…	string
`thanks`What it says once they have…	string
`askEmail`Ask for an address to reply…	boolean
`accent`	string
`captureCrashes`Catch uncaught errors automatically, as well…	boolean
`allowedTools`Narrow the woken turn to these…	string[]
`models`Which models this automation may run…	object[]
`provider`Which provider serves this work	string
`model`Which of its models	string
`effort`How hard this model should think,…	string
`thinking`Whether this model reasons before it…	boolean
`fast`Ask for this model's work at…	boolean
`harness`Which agentic loop runs it	"native" \| "claude-code"
`account`Which account pays for it	string
`actsAs`Which persona it speaks as	string
`senders`Who may talk to it, and…	object
`rules`Walked in order; the first rule…	object[]
`label`What to call these people on…	string
`ids`Sender ids, as the service names…	string[]
`groups`Group ids the service reports on…	string[]
`actsAs`Which persona their wakes speak as	string
`requireApproval`Hold their wakes for a person,…	boolean
`others`What a sender no rule names…	"allow" \| "hold" \| "ignore"
`requireApproval`Hold every fire for a person…	boolean
`holdForSeconds`Hold each fire this long before…	number
`chore`This automation is a maintenance job,…	boolean
`enabled`Whether it fires at all	boolean
`runs`	object[]
`at`	number
`outcome`	"completed" \| "skipped" \| "error" \| "interrupted"
`detail`	string
`conversationId`	string
`nextRun`	number
`webhookToken`What a caller presents at /automations/{id}/fire,…	string
`ingestKey`What a client with no website…	string

Try itanswered in this tab

curl

curl "$SANDBOX/automations" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.list();

POST/automationsCreate or edit an automation

Writes an automation by id. Nothing needs provisioning: the scheduler picks it up on its next sweep.

What you send

Field	Type	Where
`id`requiredThe automation's id	string	body
`trigger`requiredWhat sets it off: a schedule,…	object	body
`when kind is "schedule"`	shape	body
`cron`requiredWhen, in cron notation	string	body
`tz`Which clock the times in the…	string	body
`afterSessions`Fire only once at least this…	integer	body
`when kind is "once"`	shape	body
`at`requiredThe moment it fires, in milliseconds	integer	body
`when kind is "event"`	shape	body
`dailyMax`How many webhook calls a day…	integer	body
`when kind is "listener"`	shape	body
`provider`requiredWhich service to listen to	string	body
`channelId`Narrow it to one channel or…	string	body
`eventType`Narrow it to one kind of…	string	body
`mentioned`Only when the agent is actually…	boolean	body
`branch`Narrow it to one branch, for…	string	body
`allowedOrigins`Which websites may reach the public…	string[]	body
`when kind is "workspace"`	shape	body
`event`requiredWhich happening	"turn.settled" \| "agent.landed" \| "deps.broken" \| "deps.fixed"	body
`repo`Narrow it to one repository	string	body
`guard`A command run before the wake…	string	body
`prompt`requiredWhat the woken agent is told	string	body
`webchat`Settings for the public chat widget,…	object	body
`access`Who may write to it	"public" \| "google"	body
`requireName`Ask a visitor for a name…	boolean	body
`antiBot`How to keep bots out: a…	"turnstile" \| "pow"	body
`turnstileSiteKey`The public half of those keys,…	string	body
`turnstileSecret`The private half, which the sandbox…	string	body
`googleClientId`The site's own sign-in client id	string	body
`title`	string	body
`greeting`	string	body
`accent`	string	body
`position`	"top-right" \| "top-left" \| "bottom-right" \| "bottom-left"	body
`dailyMessageMax`	integer	body
`conversationMessageMax`	integer	body
`sessionTtlMinutes`	integer	body
`issues`Settings for the bug reporter, for…	object	body
`keyFromBrowsers`Let a browser report with the…	boolean	body
`dailyReportMax`How many reports a day this…	integer	body
`escalateAfter`How many more times a known…	integer	body
`antiBot`Make a person's browser solve a…	"pow"	body
`title`The dialog's heading	string	body
`prompt`The line above the box they…	string	body
`thanks`What it says once they have…	string	body
`askEmail`Ask for an address to reply…	boolean	body
`accent`	string	body
`captureCrashes`Catch uncaught errors automatically, as well…	boolean	body
`allowedTools`Narrow the woken turn to these…	string[]	body
`models`requiredWhich models this automation may run…	object[]	body
`provider`requiredWhich provider serves this work	string	body
`model`requiredWhich of its models	string	body
`effort`How hard this model should think,…	string	body
`thinking`Whether this model reasons before it…	boolean	body
`fast`Ask for this model's work at…	boolean	body
`harness`Which agentic loop runs it	"native" \| "claude-code"	body
`account`Which account pays for it	string	body
`actsAs`Which persona it speaks as	string	body
`senders`Who may talk to it, and…	object	body
`rules`requiredWalked in order; the first rule…	object[]	body
`label`What to call these people on…	string	body
`ids`Sender ids, as the service names…	string[]	body
`groups`Group ids the service reports on…	string[]	body
`actsAs`Which persona their wakes speak as	string	body
`requireApproval`Hold their wakes for a person,…	boolean	body
`others`requiredWhat a sender no rule names…	"allow" \| "hold" \| "ignore"	body
`requireApproval`Hold every fire for a person…	boolean	body
`holdForSeconds`Hold each fire this long before…	number	body
`chore`This automation is a maintenance job,…	boolean	body
`enabled`requiredWhether it fires at all	boolean	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"id":"a1b2c3d4","trigger":{"kind":"schedule","cron":"…","tz":"…","afterSessions":1},"guard":"…","prompt":"Update the changelog for the last five commits.","webchat":{"access":"public","requireName":true,"antiBot":"turnstile","turnstileSiteKey":"…","turnstileSecret":"…","googleClientId":"a1b2c3d4","title":"Update the changelog","greeting":"…","accent":"…","position":"top-right","dailyMessageMax":1,"conversationMessageMax":1,"sessionTtlMinutes":1},"issues":{"keyFromBrowsers":true,"dailyReportMax":1,"escalateAfter":1,"antiBot":"pow","title":"Update the changelog","prompt":"Update the changelog for the last five commits.","thanks":"…","askEmail":true,"accent":"…","captureCrashes":true},"allowedTools":["…","…"],"models":[{"provider":"claude","model":"claude-sonnet-4-6","effort":"…","thinking":true,"fast":true,"harness":"native"},{"provider":"claude","model":"claude-haiku-4-6","effort":"…","thinking":true,"fast":true,"harness":"claude-code"}],"account":"work","actsAs":"…","senders":{"rules":[{"label":"Nightly changelog","ids":["a1b2c3d4","e5f6a7b8"],"groups":["…","…"],"actsAs":"…","requireApproval":true},{"label":"Release notes","ids":["a1b2c3d4","e5f6a7b8"],"groups":["…","…"],"actsAs":"…","requireApproval":true}],"others":"allow"},"requireApproval":true,"holdForSeconds":1,"chore":true,"enabled":true}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.upsert({
  "id": "a1b2c3d4",
  "trigger": {
    "kind": "schedule",
    "cron": "…",
    "tz": "…",
    "afterSessions": 1
  },
  "guard": "…",
  "prompt": "Update the changelog for the last five commits.",
  "webchat": {
    "access": "public",
    "requireName": true,
    "antiBot": "turnstile",
    "turnstileSiteKey": "…",
    "turnstileSecret": "…",
    "googleClientId": "a1b2c3d4",
    "title": "Update the changelog",
    "greeting": "…",
    "accent": "…",
    "position": "top-right",
    "dailyMessageMax": 1,
    "conversationMessageMax": 1,
    "sessionTtlMinutes": 1
  },
  "issues": {
    "keyFromBrowsers": true,
    "dailyReportMax": 1,
    "escalateAfter": 1,
    "antiBot": "pow",
    "title": "Update the changelog",
    "prompt": "Update the changelog for the last five commits.",
    "thanks": "…",
    "askEmail": true,
    "accent": "…",
    "captureCrashes": true
  },
  "allowedTools": [
    "…",
    "…"
  ],
  "models": [
    {
      "provider": "claude",
      "model": "claude-sonnet-4-6",
      "effort": "…",
      "thinking": true,
      "fast": true,
      "harness": "native"
    },
    {
      "provider": "claude",
      "model": "claude-haiku-4-6",
      "effort": "…",
      "thinking": true,
      "fast": true,
      "harness": "claude-code"
    }
  ],
  "account": "work",
  "actsAs": "…",
  "senders": {
    "rules": [
      {
        "label": "Nightly changelog",
        "ids": [
          "a1b2c3d4",
          "e5f6a7b8"
        ],
        "groups": [
          "…",
          "…"
        ],
        "actsAs": "…",
        "requireApproval": true
      },
      {
        "label": "Release notes",
        "ids": [
          "a1b2c3d4",
          "e5f6a7b8"
        ],
        "groups": [
          "…",
          "…"
        ],
        "actsAs": "…",
        "requireApproval": true
      }
    ],
    "others": "allow"
  },
  "requireApproval": true,
  "holdForSeconds": 1,
  "chore": true,
  "enabled": true
});

GET/automations/catalogWhat can trigger an automation here

Every trigger this sandbox understands and every template worth starting from, the daemon's own merged with each installed extension's. Writing an automation is checked against this same list, so a screen and the daemon can never disagree about what is allowed.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`sources`	object[]
`provider`	string
`label`	string
`logo`	string
`icon`	string
`events`	object[]
`value`	string
`label`	string
`channel`	object
`label`	string
`placeholder`	string
`hint`	string
`branchField`	object
`label`	string
`placeholder`	string
`hint`	string
`sender`	object
`label`	string
`placeholder`	string
`hint`	string
`senderGroup`	object
`label`	string
`placeholder`	string
`hint`	string
`mentionLabel`	string
`starterPrompt`	string
`requires`	string[]
`enabled`	boolean
`templates`	object[]
`id`	string
`title`	string
`logo`	string
`icon`	string
`requires`	string[]
`trigger`	object
`when kind is "schedule"`	shape
`cron`When, in cron notation	string
`tz`Which clock the times in the…	string
`afterSessions`Fire only once at least this…	integer
`when kind is "once"`	shape
`at`The moment it fires, in milliseconds	integer
`when kind is "event"`	shape
`dailyMax`How many webhook calls a day…	integer
`when kind is "listener"`	shape
`provider`Which service to listen to	string
`channelId`Narrow it to one channel or…	string
`eventType`Narrow it to one kind of…	string
`mentioned`Only when the agent is actually…	boolean
`branch`Narrow it to one branch, for…	string
`allowedOrigins`Which websites may reach the public…	string[]
`when kind is "workspace"`	shape
`event`Which happening	"turn.settled" \| "agent.landed" \| "deps.broken" \| "deps.fixed"
`repo`Narrow it to one repository	string
`guard`	string
`holdForSeconds`	integer
`prompt`	string
`note`	string
`setup`	string
`description`	string
`offer`	"create" \| "configure"
`chore`	boolean

Try itanswered in this tab

curl

curl "$SANDBOX/automations/catalog" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.catalog();

POST/automations/{id}/enabledTurn an automation on or off

Flips only the switch, so a row in a list can be toggled without rebuilding the whole record.

What you send

Field	Type	Where
`id`required	string	address
`enabled`required	boolean	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations/a1b2c3d4/enabled" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"enabled":true}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.setEnabled({
  "id": "a1b2c3d4",
  "enabled": true
});

DELETE/automations/{id}Delete an automation

Removes it, so nothing fires from it again.

What you send

Field	Type	Where
`id`required	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/automations/a1b2c3d4" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.remove({
  "id": "a1b2c3d4"
});

POST/automations/{id}/rotate-tokenRotate an automation's webhook token or intake key

Mints a new credential for the door this automation opens and retires the old one at once. Every caller has to be handed the new URL; that is the point. Refused for an automation with no door.

What you send

Field	Type	Where
`id`required	string	address

What comes back

Field	Type
`token`The freshly minted credential	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations/a1b2c3d4/rotate-token" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.rotateToken({
  "id": "a1b2c3d4"
});

POST/automations/{id}/runFire an automation by hand

The answer to writing something that runs at three in the morning and having no way to try it. It takes exactly the path the real trigger takes, including the check that decides whether there was anything to do, since skipped by the guard is the most useful thing this can tell you. A switched-off automation fires too, because trying it before switching it on is the main reason to press this. Not available for the trigger that listens for incoming messages, where a hand-fire would produce an agent asked to handle events and handed none; send the bot a message instead. Answers straight away and runs detached.

What you send

Field	Type	Where
`id`required	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations/a1b2c3d4/run" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.run({
  "id": "a1b2c3d4"
});

GET/automations/senders/{provider}Who has written to a listener source

Everyone whose message reached one of this source's automations, newest first, admitted or not. What the sender rules picker offers by name while storing the id the service vouches for.

What you send

Field	Type	Where
`provider`requiredWhich listener source	string	address

What comes back

Field	Type
`senders`Newest first	object[]
`id`The sender id the service vouches…	string
`name`What they were called on their…	string
`groups`The group ids the service reported…	string[]
`firstSeenAt`When they first reached an automation…	number
`lastSeenAt`When they last did, in milliseconds	number
`messages`How many of their messages reached…	number

Try itanswered in this tab

curl

curl "$SANDBOX/automations/senders/claude" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.senders({
  "provider": "claude"
});

GET/automations/pendingAutomations waiting for a yes

The queue an automation set to ask first lands in each time it would have fired.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`approvals`Everything waiting for a yes	object[]
`id`This waiting item's own id, which…	string
`automationId`Which automation it came from	string
`payload`What set it off, kept whole…	string
`origin`Where the message came from, kept…	object
`automationId`	string
`provider`	string
`channelId`	string
`author`	string
`title`What the conversation would be called	string
`conversationId`The thread this belongs to, when…	string
`sessionId`The provider session that thread last…	string
`thread`Which inbound thread this belongs to,…	string
`actsAs`Which persona the approved run speaks…	string
`createdAt`When it started waiting, in milliseconds	number
`autoRunAt`When it goes ahead on its…	number

Try itanswered in this tab

curl

curl "$SANDBOX/automations/pending" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.pendingList();

POST/automations/pending/{id}/approveLet a held automation run

Releases one waiting automation and runs the wake it was holding. Answers straight away and runs detached.

What you send

Field	Type	Where
`id`requiredWhich waiting item	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations/pending/a1b2c3d4/approve" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.approve({
  "id": "a1b2c3d4"
});

POST/automations/pending/{id}/rejectDrop a held automation

Throws one waiting fire away. The automation stays on, and the next trigger queues as usual.

What you send

Field	Type	Where
`id`requiredWhich waiting item	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/automations/pending/a1b2c3d4/reject" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.automations.reject({
  "id": "a1b2c3d4"
});