Authentication

Python
TypeScript

from isorun import Sandbox

# Reads ISORUN_API_KEY from environment
sb = Sandbox("python")

# Or pass it directly
sb = Sandbox("python", api_key="isorun_live_<region>_<id>_<hmac>")

import { Sandbox } from 'isorun';

// Reads ISORUN_API_KEY from environment
const sb = await Sandbox.create('python');

// Or pass it directly
const sb = await Sandbox.create({ image: 'python', apiKey: 'isorun_live_<region>_<id>_<hmac>' });

Environment variable

export ISORUN_API_KEY=isorun_live_<region>_<id>_<hmac>

All SDKs read ISORUN_API_KEY automatically. No config files.

How it works

Keys are HMAC-signed. Validation is stateless — the server verifies the signature without a database call. This means auth adds zero latency to sandbox creation.

Every request to /v1/* requires the key as a Bearer token:

Authorization: Bearer isorun_live_<region>_<id>_<hmac>

Get a key

Create one in the dashboard. Keys are scoped to your organization and can be revoked at any time.