Dashboard

The same fleet view, with live charts and processes, runs in your terminal too: prized dashboard (Terminal dashboard).

Layout

Screens

Owners and members also get Sandboxes in the sidebar, under Boxes:

API docs, after the tabs on these screens, opens the Sandbox API reference in a new tab. The bottom-right install card stays off these screens, which carry their own install step.

Boxes

One card per box, grouped Needs attention, In progress, Running and Paused, with All, Running and Paused filters and New box in the header. A card shows the box's state, size, region, cpu, memory and disk, and whether it is in use, idle, or due to pause; hover to copy prized ssh <name>, click to open the box.

The cards are the boxes you own. In a shared workspace, everyone else's sit under them in a folded Team section, each card naming its owner; it starts open when you own no box yet, and the state filters apply to it too. An owner's own cards also include any box no current member owns, such as a removed member's. Owners and members still open any box, from the Team section, by its link, on Team activity, or from the CLI. A contractor sees only their own, with no Team section.

New box

New box on Boxes, or the + beside the workspace name; the summary card at the right holds Create box.

The box page

Tabs: Overview, Terminal, Desktop, Metrics, Files, Snapshots, Settings. On every tab the header carries Pause (or Resume) and a … menu with the other actions.

Overview

The top line shows the state and since when (Running for 2d 4h, Paused 3d ago), and says so when a running box's report is more than two minutes late. Beside it: the prized ssh command (click to copy) and Open terminal, which reopens the way in you used last; its chevron lists them all:

• Terminal: the browser terminal.
• Cursor, Terminal app: that app on this computer, on the box, through the SSH stanza prized setup wrote (Sessions).
• Claude Code, Codex: the browser terminal in the agent's session (claude or codex), attached if prized agents run started it, an empty shell otherwise (Agents).

Below it, two tiles and then Activity, the box's history:

Ports, the Machine tile's last row, has a chip for every port the box is listening on and every port shared from it. A shared port's chip is blue with ↗ (outlined while nothing listens on it); shared ports come first, and past two rows the rest fold behind N more. Listening ports come from the box's own report, so a new server shows up within about a minute; a zero data retention workspace keeps no such report, so only its links show. Click a chip for its card:

+ at the end of the row shares a port nothing listens on yet.

The … menu: Open terminal, Snapshot now (Snapshots), Save as template… (Templates), Copy box id, Settings, and Delete box… (type delete <name>; the undo is Recently deleted, Deleting a box). Forking is prized fork or the API (Fork a box).

A refused action shows its reason under the title; what each action does is on Boxes and Snapshots.

Settings

Terminal

The box's tmux session main, the one prized ssh opens: opening it wakes a paused box, and closing the tab loses nothing (Sessions).

• Other sessions: ?session=NAME opens another session, created if missing.
• herdr: on a box with herdr, tmux and herdr at the top right switch between the two; the browser remembers the pick per box, and ?mux=herdr opens herdr directly. In herdr, an agent that finishes or needs you shows as a toast over the terminal. Very large notification messages are ignored to keep the terminal responsive.
• Copy: select to copy (Cmd+C on a Mac, Ctrl+Insert or the right-click menu elsewhere); Ctrl+C goes to the shell.

On a phone:

• Taps and drags: a tap is a click (herdr's buttons, tmux's panes and status line, Claude Code's own) and a drag scrolls.
• The keyboard: a tap on the line where the cursor is, such as Claude Code's prompt or a shell's, also brings the keyboard up; elsewhere the keyboard stays as it is.
• The key row: the row under the terminal starts with the keyboard key, which brings the keyboard up and puts it away, then Esc, Tab, Ctrl, ^C and the arrows. Ctrl applies to the next key you type and brings the keyboard up for it: Ctrl then c is Ctrl+C, and Ctrl, b, then c opens a new tmux window (a new tab in herdr).

Desktop

Pick Desktop or Browser, then Open desktop or Open browser (Desktop).

Metrics

Pick a range at the top right: Last hour is live; Last 6 hours, Last 24 hours, Last 7 days and Last 30 days are stored, drawn as an average with a max band, paused spans shaded and lifecycle events marked. Click a chart to pin a moment: the processes and listening ports below switch to the nearest stored snapshot (Unpin or Esc releases it). Live, the page also shows per-core load, interfaces, mounts and tmux sessions.

The page never wakes a paused box; retention is on Data retention.

Files

A file browser as the box's login user, opening in your home directory (~); it needs a running box and never wakes one.

• Find a folder: type a path in the filter (~/projects or /var/log, then Enter) or click the breadcrumb; Display holds the sort and Show hidden files (⌘⇧.).
• Change files: a row's … menu has Open, Rename, Download and Delete…; New folder and Upload (or a drop on the listing) add to the folder.
• Uploads: keep the local file unchanged until it finishes. A detected change cancels the upload. One that fails leaves any existing file of that name as it was; one that does not stop promptly ends the file-browser connection (Reconnect tries again). If the connection drops near the end of an upload, check the file before uploading it again. While a transfer runs, closing or reloading the tab asks first.

Keys: ↑ ↓ move, Enter opens, Backspace goes up, / focuses the filter, Esc closes the file or clears the filter.

A text file within the edit cap opens in an editor with Save; a bigger one shows its first megabyte read-only, and a binary file offers Download. Caps are on Limits.

Snapshots

The box page's Snapshots tab lists its snapshots, newest first. Beside the heading: the automatic schedule (every hour to every week, and how many to keep) and New snapshot. A row's … menu: Restore into a new box, Make template, Delete (Cancel snapshot while it is being taken); a template adds New box from this template, Rename template and Drop template name (Snapshots).

Deleted

The Deleted tab of Boxes: Recently deleted holds the undo copies of deleted boxes (Restore the box, Delete now); Templates lists templates whose source box is gone, with the same menu as above.

Connectors

One row per provider; Connect asks for a running box, the credential, the env name and, for ClickHouse, the HTTPS endpoint (Connectors).

Secrets

New secret takes a name, a value, the allowed hosts (a name such as OPENAI_API_KEY fills in its provider's host), and Available to: All boxes, Some boxes, or Members. A row's … menu: Details (grants with Revoke, grant a box, grant a member, usage), Rotate (the placeholder stays, so mounted boxes keep working), Delete. Values are write-only once saved (Secrets for agents, Teams: Scoped secrets).

Workspace settings

Owner-only controls say so to members; while the workspace is closing, every control is read-only.

Activity

Totals (boxes running, sessions attached, spend today and this cycle), then Boxes (owner, state, idle time, sessions, last prompt and exec, spend), Members (boxes, sessions, last active, spend; not shown to contractors), and Recent (the newest 50 audit rows, 15 a page). The terms are on Teams: Team activity.

Policies

Settings › Policies. Each rule saves on its own; clear its field (or pick Any size) and save to turn it off. What each rule does is on Teams: Policies.

Audit log

Settings › Audit log. SSH certificate issued records a credential being issued, not a successful connection. Kinds, origins and the export contract are on Teams: Audit log.

Billing

Settings › Billing: everyone reads it; only the owner sees the controls.

Account

Under Settings, Account is you, not the workspace.

• Profile: your name, your email from your sign-in provider, and Theme: System (the default, following your OS), Light or Dark.
• Security: Sign-in methods (Google and GitHub; Connect links another provider by its verified email, Disconnect unlinks any but the last) and Sessions (each browser and the network address it signed in from; Sign out one, or Sign out other sessions).

API keys have their own page under workspace settings; the sign-in model is on Identity and access.

Where a setting lives