daytona.destroy_sandbox high conf highhuman approval
Permanently destroys a Daytona sandbox and all files, processes, and state within it; irreversible loss of any unsaved work in that environment.
daytona.execute_command high conf highOBO
Runs arbitrary shell commands with sandbox-user permissions — can install packages, modify files, reach network services, and exfiltrate anything readable in the environment.
All other tools (10)
daytona.create_folder low conf highallow
Creates a new directory in the sandbox filesystem; low-impact, reversible workspace setup.
daytona.create_sandbox medium conf highaudit
Provisions a new ephemeral Daytona sandbox, consuming compute entitlements and standing up an isolated Linux environment the agent can run code in.
daytona.delete_file medium conf highaudit
Removes a file or directory from the sandbox; destructive within the ephemeral environment but scoped to that session's data.
daytona.file_download medium conf highaudit
Reads a file out of the sandbox and returns its content as text or base64, potentially surfacing source code, secrets, or generated artifacts to the caller.
daytona.file_upload low conf highallow
Writes files into the sandbox from text or base64 content with overwrite controls, seeding the environment for subsequent tool operations.
daytona.get_file_info low conf highallow
Returns metadata about a single sandbox file such as size and type; read-only with no state change.
daytona.git_clone low conf highallow
Clones a Git repository into the sandbox, pulling its full contents into the ephemeral environment for use by later tool calls.
daytona.list_files low conf highallow
Enumerates the files in a sandbox directory; read-only reconnaissance of the environment's contents.
daytona.move_file low conf highallow
Moves or renames a file within the sandbox filesystem; reversible reorganization of workspace contents.
daytona.preview_link medium conf highaudit
Opens a public tunnel exposing a local sandbox port to the internet without configured authentication, potentially surfacing an internal service or its data externally.