Agent-readable docs index: /llms.txt. Full docs in one file: /llms-full.txt. Download /docs.zip to grep all markdown files locally.

Exposing a Port

Create a public HTTPS URL that proxies traffic to a port inside your sandbox:
bash
oc preview create sb-abc123 --port 3000 # → hostname: sb-abc123-p3000.workers.opencomputer.dev

Sharing a Dev Server

Start a server inside the sandbox, expose it, and share the URL:
bash
# Start a dev server in the background oc exec sb-abc123 -- bash -c 'cd /app && npm run dev &' # Expose port 3000 oc preview create sb-abc123 --port 3000 # Get the URL oc preview list sb-abc123

Multiple Ports

Expose multiple services from the same sandbox:
bash
oc preview create sb-abc123 --port 3000 # Frontend oc preview create sb-abc123 --port 8080 # API server oc preview list sb-abc123 # PORT HOSTNAME SSL CREATED # 3000 sb-abc123-p3000.workers.opencomputer.dev active ... # 8080 sb-abc123-p8080.workers.opencomputer.dev active ...

Custom Domains

Pass --domain to use your own domain. DNS must point to OpenComputer's ingress, and the domain must be verified in the dashboard. SSL is provisioned automatically.
bash
oc preview create sb-abc123 --port 3000 --domain preview.myapp.com

Cleanup

bash
oc preview delete sb-abc123 3000
Preview URLs persist across hibernation/wake cycles — no need to re-create them.

Bearer-Token Authentication

By default, anyone who knows the preview hostname can hit your sandbox's port. To require an Authorization: Bearer <token> header on every request, opt in at create time:
bash
oc sandbox create --preview-auth # Created sandbox sb-abc123 (status: running) # Preview auth token (shown once): qx2sSi5IYXWBvnnRqwK9Ky_cIAI-x0Vx1bPCt0XMxsI
Then call your preview URL with the token:
bash
curl -H "Authorization: Bearer qx2sSi5IYX..." https://sb-abc123-p3000.workers.opencomputer.dev/
Bring your own token if your gateway already has a shared secret:
bash
oc sandbox create --preview-auth-token "$GATEWAY_TOKEN"
Rotate the token (old one stops working immediately):
bash
oc preview rotate-auth sb-abc123 # New preview auth token (shown once): <new token>
Token is shown exactly once and only its SHA-256 hash is stored. See Authentication for the SDK equivalents.
SDK usage: Preview URLs. Full flags: CLI Reference.