Connected systems

Capabilities

The outside systems this sandbox is wired into, and connecting a new one

On this page(14 sections)

Everything this sandbox is connected to
Connect something, or change a connection
Test a connection's settings without saving them
Generate an SSH key for a connection
Disconnect something
Rename a connection
Replace a stored credential
Re-check one connection
A connection's settings, credentials included
Read a plugin marketplace
The versions a repository offers
Stop suggesting this connection
Sign in to a connection by hand
Mint a one-time code

A capability is a system the agent can reach: a forge account, a chat server, a database, one of your own machines. These routes connect and disconnect them, carry the credential each needs, report whether a connection is live, and drive the interactive parts of a sign-in, including a one-time code.

14 calls. Pick one to open it, or use the list on the right.

GET/capabilitiesEverything this sandbox is connected to

Each connection with its live state, the settings that are safe to show, and the names of the credentials it holds. The values of those credentials are never in the answer, on any route but one.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`capabilities`What this sandbox is connected to	object[]
`id`The connection's id	string
`kind`What sort of thing it is	"devops" \| "monorepo" \| "mcp" \| "cli" … (21)
`status`Whether it is working	object
`state`Whether it is live, still coming…	"active" \| "pending" \| "error" \| "inactive"
`detail`What is wrong, in words a…	string
`code`A short marker for that reason,…	string
`settling`True while something under way will…	boolean
`config`Its settings, minus anything secret	object
`secrets`Which credentials it holds, by name	string[]
`recommendations`Things worth connecting, worked out from…	object[]
`entry`Which catalog entry is being suggested	string
`evidence`What was seen that prompted it:…	string
`reason`The same claim in words, without…	string
`prefill`Settings the scan could read, to…	object

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.list();

POST/capabilitiesConnect something, or change a connectionstream

Writes a connection and streams the work of applying it, because some kinds provision real infrastructure and take a while. Sending an id that already exists edits that connection: this is the edit as well as the create. Since a caller is never shown stored credentials, it marks the ones it is leaving alone and the daemon fills them in, which is the only way to change one setting without retyping a key.

What you send

Field	Type	Where
`when kind is "devops"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "monorepo"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "mcp"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredWhere the tool server answers	string	body
`token`The credential it needs, if any	string	body
`when kind is "cli"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`requiredWhich tool to give the agent	string	body
`when kind is "plugin"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the plugin…	string	body
`ref`A branch, tag or commit to…	string	body
`path`Where inside the repository the plugin…	string	body
`token`A credential for a private repository	string	body
`commit`The exact commit installed, in full,…	string	body
`when kind is "extension"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the extension…	string	body
`ref`requiredThe exact commit to install, in…	string	body
`path`Where inside the repository the extension…	string	body
`token`A credential for a private repository	string	body
`registry`Which registry this install came from,…	string	body
`when kind is "ssh"`	shape	body
`id`required	string	body
`config`required	object	body
`when auth is "key"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`privateKey`requiredThe private key, whole	string	body
`when auth is "generated"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`privateKey`requiredThe private half of the generated…	string	body
`when auth is "password"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`password`requiredThe password	string	body
`when kind is "vpn"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "fortinet"`	shape	body
`server`required	string	body
`port`	integer	body
`username`required	string	body
`password`required	string	body
`trustedCert`	string	body
`realm`	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "ipsec"`	shape	body
`server`required	string	body
`presharedKey`required	string	body
`localId`	string	body
`remoteId`	string	body
`username`	string	body
`password`	string	body
`ikeVersion`	"1" \| "2"	body
`pfs`	"on" \| "off"	body
`dhGroup`	"2" \| "5" \| "14" \| "15" … (7)	body
`aggressive`	"on" \| "off"	body
`routedNetworks`	string	body
`autoConnect`	"on" \| "off"	body
`when kind is "exit"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "tor"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "vpngate"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when kind is "netdisk"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`required	"smb"	body
`server`requiredThe NAS or file server: a…	string	body
`share`requiredThe share name, the first path…	string	body
`path`A folder inside the share to…	string	body
`username`requiredThe account the sandbox mounts as	string	body
`password`Its password	string	body
`domain`The Windows domain or workgroup, only…	string	body
`access`Whether the agent may write to…	"read" \| "readwrite"	body
`version`The SMB dialect to insist on	"auto" \| "3.1.1" \| "3.0" \| "2.1" … (5)	body
`autoMount`	"on" \| "off"	body
`when kind is "docker"`	shape	body
`id`required	string	body
`config`required	object	body
`gpu`	"on" \| "off"	body
`registryMirror`	string	body
`insecureRegistries`	string	body
`addressPool`	string	body
`when kind is "browser"`	shape	body
`id`required	string	body
`config`required	object	body
`platform`required	string	body
`username`	string	body
`password`	string	body
`identity`	string	body
`purpose`	string	body
`openedAt`	string	body
`exit`	string	body
`when kind is "identity"`	shape	body
`id`required	string	body
`config`required	object	body
`email`required	string	body
`password`	string	body
`mailbox`	string	body
`loginUrl`	string	body
`openAccounts`	"on" \| "off"	body
`exit`	string	body
`when kind is "device"`	shape	body
`id`required	string	body
`config`required	object	body
`shell`	"on" \| "off"	body
`write`	"on" \| "off"	body
`screen`	"on" \| "off"	body
`control`	"on" \| "off"	body
`sandboxes`	"on" \| "off"	body
`destructive`	"on" \| "off"	body
`roots`	string	body
`platform`required	string	body
`when kind is "webext"`	shape	body
`id`required	string	body
`config`required	object	body
`read`	"on" \| "off"	body
`act`	"on" \| "off"	body
`screenshot`	"on" \| "off"	body
`cookies`	"on" \| "off"	body
`confirm`	"sensitive" \| "always" \| "never"	body
`platform`required	string	body
`when kind is "phone"`	shape	body
`id`required	string	body
`config`required	object	body
`screen`	"on" \| "off"	body
`control`	"on" \| "off"	body
`files`	"on" \| "off"	body
`write`	"on" \| "off"	body
`notifications`	"on" \| "off"	body
`apps`	"on" \| "off"	body
`destructive`	"on" \| "off"	body
`confirm`	"sensitive" \| "always" \| "never"	body
`platform`required	string	body
`when kind is "agent"`	shape	body
`id`required	string	body
`config`required	object	body
`command`required	string	body
`name`	string	body
`env`	string	body
`loginCommand`	string	body
`when kind is "endpoint"`	shape	body
`id`required	string	body
`config`required	object	body
`baseUrl`required	string	body
`protocol`	"openai" \| "anthropic"	body
`apiKey`	string	body
`headers`	string	body
`when kind is "localmodel"`	shape	body
`id`required	string	body
`config`required	object	body
`model`required	string	body
`gpu`	"on" \| "off"	body
`url`	string	body
`context`	"16384" \| "32768" \| "65536" \| "131072" \| "custom"	body
`contextTokens`	integer	body
`when kind is "wallet"`	shape	body
`id`required	string	body
`config`required	object	body
`network`	"eip155:8453" \| "eip155:84532"	body
`address`	string	body
`perPaymentMaxUsd`	string	body
`autoApproveUnderUsd`	string	body
`dailyCapUsd`	string	body
`allow`	string	body
`deny`	string	body
`… and 1 more shapes`In the OpenAPI document	shape	body

What comes back

Field	Type
`when event is "message"`	shape
`data`	object
`kind`	string
`id`	string
`retry`	number
`when event is "done"`	shape
`data`	unknown
`id`	string
`retry`	number
`when event is "error"`	shape
`data`	unknown
`id`	string
`retry`	number

Try itanswered in this tab

curl

curl -N -X POST "$SANDBOX/capabilities" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"id":"a1b2c3d4","kind":"devops","config":{}}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.add({
  "id": "a1b2c3d4",
  "kind": "devops",
  "config": {}
});

POST/capabilities/probeTest a connection's settings without saving them

Dials the service the way this connection would and hands back what it said, before anything is written. The answer is the service's own confirmation or its exact refusal, so a wrong token or an unreachable host is found on the form rather than on a card afterwards.

What you send

Field	Type	Where
`when kind is "devops"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "monorepo"`	shape	body
`id`required	string	body
`config`required	object	body
`when kind is "mcp"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredWhere the tool server answers	string	body
`token`The credential it needs, if any	string	body
`when kind is "cli"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`requiredWhich tool to give the agent	string	body
`when kind is "plugin"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the plugin…	string	body
`ref`A branch, tag or commit to…	string	body
`path`Where inside the repository the plugin…	string	body
`token`A credential for a private repository	string	body
`commit`The exact commit installed, in full,…	string	body
`when kind is "extension"`	shape	body
`id`required	string	body
`config`required	object	body
`url`requiredThe repository to take the extension…	string	body
`ref`requiredThe exact commit to install, in…	string	body
`path`Where inside the repository the extension…	string	body
`token`A credential for a private repository	string	body
`registry`Which registry this install came from,…	string	body
`when kind is "ssh"`	shape	body
`id`required	string	body
`config`required	object	body
`when auth is "key"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`privateKey`requiredThe private key, whole	string	body
`when auth is "generated"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`privateKey`requiredThe private half of the generated…	string	body
`when auth is "password"`	shape	body
`host`requiredThe machine's address	string	body
`port`Which port it listens on	number	body
`user`requiredWhich user to connect as	string	body
`password`requiredThe password	string	body
`when kind is "vpn"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "fortinet"`	shape	body
`server`required	string	body
`port`	integer	body
`username`required	string	body
`password`required	string	body
`trustedCert`	string	body
`realm`	string	body
`autoConnect`	"on" \| "off"	body
`when provider is "ipsec"`	shape	body
`server`required	string	body
`presharedKey`required	string	body
`localId`	string	body
`remoteId`	string	body
`username`	string	body
`password`	string	body
`ikeVersion`	"1" \| "2"	body
`pfs`	"on" \| "off"	body
`dhGroup`	"2" \| "5" \| "14" \| "15" … (7)	body
`aggressive`	"on" \| "off"	body
`routedNetworks`	string	body
`autoConnect`	"on" \| "off"	body
`when kind is "exit"`	shape	body
`id`required	string	body
`config`required	object	body
`when provider is "tor"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "vpngate"`	shape	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when provider is "wireguard"`	shape	body
`config`required	string	body
`country`	string	body
`autoStart`	"on" \| "off"	body
`when kind is "netdisk"`	shape	body
`id`required	string	body
`config`required	object	body
`provider`required	"smb"	body
`server`requiredThe NAS or file server: a…	string	body
`share`requiredThe share name, the first path…	string	body
`path`A folder inside the share to…	string	body
`username`requiredThe account the sandbox mounts as	string	body
`password`Its password	string	body
`domain`The Windows domain or workgroup, only…	string	body
`access`Whether the agent may write to…	"read" \| "readwrite"	body
`version`The SMB dialect to insist on	"auto" \| "3.1.1" \| "3.0" \| "2.1" … (5)	body
`autoMount`	"on" \| "off"	body
`when kind is "docker"`	shape	body
`id`required	string	body
`config`required	object	body
`gpu`	"on" \| "off"	body
`registryMirror`	string	body
`insecureRegistries`	string	body
`addressPool`	string	body
`when kind is "browser"`	shape	body
`id`required	string	body
`config`required	object	body
`platform`required	string	body
`username`	string	body
`password`	string	body
`identity`	string	body
`purpose`	string	body
`openedAt`	string	body
`exit`	string	body
`when kind is "identity"`	shape	body
`id`required	string	body
`config`required	object	body
`email`required	string	body
`password`	string	body
`mailbox`	string	body
`loginUrl`	string	body
`openAccounts`	"on" \| "off"	body
`exit`	string	body
`when kind is "device"`	shape	body
`id`required	string	body
`config`required	object	body
`shell`	"on" \| "off"	body
`write`	"on" \| "off"	body
`screen`	"on" \| "off"	body
`control`	"on" \| "off"	body
`sandboxes`	"on" \| "off"	body
`destructive`	"on" \| "off"	body
`roots`	string	body
`platform`required	string	body
`when kind is "webext"`	shape	body
`id`required	string	body
`config`required	object	body
`read`	"on" \| "off"	body
`act`	"on" \| "off"	body
`screenshot`	"on" \| "off"	body
`cookies`	"on" \| "off"	body
`confirm`	"sensitive" \| "always" \| "never"	body
`platform`required	string	body
`when kind is "phone"`	shape	body
`id`required	string	body
`config`required	object	body
`screen`	"on" \| "off"	body
`control`	"on" \| "off"	body
`files`	"on" \| "off"	body
`write`	"on" \| "off"	body
`notifications`	"on" \| "off"	body
`apps`	"on" \| "off"	body
`destructive`	"on" \| "off"	body
`confirm`	"sensitive" \| "always" \| "never"	body
`platform`required	string	body
`when kind is "agent"`	shape	body
`id`required	string	body
`config`required	object	body
`command`required	string	body
`name`	string	body
`env`	string	body
`loginCommand`	string	body
`when kind is "endpoint"`	shape	body
`id`required	string	body
`config`required	object	body
`baseUrl`required	string	body
`protocol`	"openai" \| "anthropic"	body
`apiKey`	string	body
`headers`	string	body
`when kind is "localmodel"`	shape	body
`id`required	string	body
`config`required	object	body
`model`required	string	body
`gpu`	"on" \| "off"	body
`url`	string	body
`context`	"16384" \| "32768" \| "65536" \| "131072" \| "custom"	body
`contextTokens`	integer	body
`when kind is "wallet"`	shape	body
`id`required	string	body
`config`required	object	body
`network`	"eip155:8453" \| "eip155:84532"	body
`address`	string	body
`perPaymentMaxUsd`	string	body
`autoApproveUnderUsd`	string	body
`dailyCapUsd`	string	body
`allow`	string	body
`deny`	string	body
`… and 1 more shapes`In the OpenAPI document	shape	body

What comes back

Field	Type
`checked`Whether this connection can be tested…	boolean
`ok`Whether the service answered as itself	boolean
`message`What happened, in the words a…	string
`who`Who the service said the credential…	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/probe" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"id":"a1b2c3d4","kind":"devops","config":{}}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.probe({
  "id": "a1b2c3d4",
  "kind": "devops",
  "config": {}
});

POST/capabilities/ssh-keyGenerate an SSH key for a connection

Makes an ed25519 key pair inside the sandbox and answers with its public half, to authorize on the server, and a one-time token. The private half is never in the answer: it waits in the sandbox until an add sends the token where the private key goes, and lapses if none does within thirty minutes.

What you send

Nothing. Call it as it is.

What comes back

Field	Type
`publicKey`The public half, as the one…	string
`token`Stands for the private half, which…	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/ssh-key" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.sshKey();

DELETE/capabilities/{id}Disconnect something

Tears a connection down. The kinds that own real infrastructure refuse, because deleting those would be losing data rather than losing a connection.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/capabilities/a1b2c3d4" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.remove({
  "id": "a1b2c3d4"
});

POST/capabilities/{id}/renameRename a connection

Carries everything the old name keyed across with it: a browser profile and its logins, an enrolled machine, an extension's copy of its source. Removing and re-adding would lose exactly the state that made the connection worth keeping. Kinds whose name is part of what they are refuse.

What you send

Field	Type	Where
`id`required	string	address
`to`required	string	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/rename" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"to":"src/server.ts"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.rename({
  "id": "a1b2c3d4",
  "to": "src/server.ts"
});

POST/capabilities/{id}/secretReplace a stored credential

Swaps one connection's key or token for a new one and re-applies it, without touching any of its other settings.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address
`value`requiredThe new credential	string	body

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/secret" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"value":"…"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.setSecret({
  "id": "a1b2c3d4",
  "value": "…"
});

GET/capabilities/{id}/statusRe-check one connection

Probes a single connection right now, for a screen that wants to refresh one row rather than the whole list.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`state`Whether it is live, still coming…	"active" \| "pending" \| "error" \| "inactive"
`detail`What is wrong, in words a…	string
`code`A short marker for that reason,…	string
`settling`True while something under way will…	boolean

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/status" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.status({
  "id": "a1b2c3d4"
});

GET/capabilities/{id}/connectionA connection's settings, credentials included

The one call that hands back stored secrets, so an extension's own backend can dial the service behind a connection. Never answered for a signed-in person: only a machine credential reaches it, and an extension's only if its manifest asked for this route out loud at install time, and only for a connection of a kind that extension itself contributes.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`id`The connection's id	string
`kind`What sort of thing it is	string
`config`Its settings exactly as stored, credentials…	object

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/connection" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.connection({
  "id": "a1b2c3d4"
});

POST/capabilities/marketplaceRead a plugin marketplace

Resolves a plugin marketplace source into the list of connections you could install from it.

What you send

Field	Type	Where
`url`requiredThe registry to read	string	body
`token`A credential for a private one	string	body

What comes back

Field	Type
`name`What the registry calls itself	string
`plugins`What it lists, each with the…	object[]
`name`	string
`description`	string
`version`	string
`kind`	"plugin" \| "extension"
`trust`	"verified" \| "listed" \| "blocked"
`trustReason`	string
`securityReview`	object
`sha`	string
`url`	string
`path`	string
`policy`	string
`reviewer`	string
`reviewedAt`	string
`runId`	string
`deterministic`	object
`policy`	string
`scanner`	string
`version`	string
`runId`	string
`admitted`	boolean
`securityFix`	boolean
`category`	string
`art`	string
`logo`	string
`icon`	string
`homepage`	string
`install`	object
`url`	string
`ref`	string
`path`	string
`stars`	integer
`pushedAt`	string
`checks`	object
`sha`	string
`manifest`	string
`bundle`	string
`engines`	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/marketplace" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"url":"https://sandbox-a1b2c3d4e5f6.intentic.dev","token":"ict_9wQ4rTz8kLmN3pXbV7hJ"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.marketplace({
  "url": "https://sandbox-a1b2c3d4e5f6.intentic.dev",
  "token": "ict_9wQ4rTz8kLmN3pXbV7hJ"
});

POST/capabilities/refsThe versions a repository offers

Asks a git remote what it advertises and hands back every branch and tag with the commit it points at, plus which branch is its default. Nothing is cloned and nothing is written, so this is cheap enough to answer a form as someone types a repository into it.

What you send

Field	Type	Where
`url`requiredThe repository to ask	string	body
`token`A credential for a private one	string	body
`keeping`Which connection a VAULTED token belongs…	string	body

What comes back

Field	Type
`defaultBranch`The branch the remote advertises as…	string
`refs`Every branch the remote advertises, then…	object[]
`name`The branch or tag as a…	string
`kind`	"branch" \| "tag"
`sha`The commit it points at	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/refs" \
  -H "x-intentic-control: $INTENTIC_TOKEN" \
  -H "content-type: application/json" \
  -d '{"url":"https://sandbox-a1b2c3d4e5f6.intentic.dev","token":"ict_9wQ4rTz8kLmN3pXbV7hJ","keeping":"…"}'

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.refs({
  "url": "https://sandbox-a1b2c3d4e5f6.intentic.dev",
  "token": "ict_9wQ4rTz8kLmN3pXbV7hJ",
  "keeping": "…"
});

DELETE/capabilities/recommendations/{entry}Stop suggesting this connection

Not needed, for now. Nothing is torn down. The suggestion comes back if what prompted it in the workspace changes, because what is remembered is the evidence, not the refusal.

What you send

Field	Type	Where
`entry`requiredWhich suggestion to stop making	string	address

What comes back

Field	Type
`ok`Always true	true

Try itanswered in this tab

curl

curl -X DELETE "$SANDBOX/capabilities/recommendations/%E2%80%A6" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.dismiss({
  "entry": "…"
});

POST/capabilities/{id}/loginSign in to a connection by hand

Opens the connection's own sign-in in a terminal a person can type into, for the flows that need a code pasted or a device confirmed. The answer names the terminal to attach to.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`session`The terminal the sign-in is happening…	string

Try itanswered in this tab

curl

curl -X POST "$SANDBOX/capabilities/a1b2c3d4/login" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.login({
  "id": "a1b2c3d4"
});

GET/capabilities/{id}/otpMint a one-time code

Generates a single two-factor code from a stored seed. The one credential-adjacent read an agent is allowed, and it is safe because a code expires in seconds and never reveals the seed, so an agent can answer a prompt without ever holding the factor.

What you send

Field	Type	Where
`id`requiredWhich connection	string	address

What comes back

Field	Type
`code`The code	string
`secondsRemaining`How long it lasts	number

Try itanswered in this tab

curl

curl "$SANDBOX/capabilities/a1b2c3d4/otp" \
  -H "x-intentic-control: $INTENTIC_TOKEN"

TypeScript

import { sandbox } from "@intentic/sandbox-client";

const result = await sandbox.capabilities.otp({
  "id": "a1b2c3d4"
});