Overview - Gravix Layer

A runtime is a hardware-isolated sandbox: a dedicated microVM where your application or agent can execute code, run shell commands, and manage files without sharing a kernel with other tenants. Use runtimes for coding agents, data analysis, evaluations, interpreters, and tool hosting.

What you get

Capability	What it does
Code	`run_code` for Python and JavaScript
Commands	`run_cmd` for shell and package installs
Files	Read, write, list, upload, download
Git	Clone, commit, push, branch
Access	SSH and web terminal
Secrets	Attach Identity providers; keys arrive as env vars on execution
Templates	Base images or custom templates

Why sandboxes

Agents generate code and commands you cannot fully predict. A runtime keeps that work inside an isolated boundary so it does not touch your host credentials or local files. Each runtime has its own CPU, memory, and disk. It stays up until you terminate it (unless you set a timeout).

Basic usage

from gravixlayer import GravixLayer

client = GravixLayer()
runtime = client.runtime.create(template="python-3.14-base-small")

print(runtime.run_code(code="print('hello')").text)
print(runtime.run_cmd(command="python", args=["--version"]).stdout)

runtime.file.write("/workspace/hello.txt", "hi\n")
print(runtime.file.read("/workspace/hello.txt").content)

runtime.kill()

With secrets

provider = client.identity.providers.create(
    name="OpenAI",
    provider_type="openai",
    secrets=[{"key": "OPENAI_API_KEY", "value": "sk-..."}],
)

runtime = client.runtime.create(
    template="python-3.14-base-small",
    providers=[provider.id],
)

print(runtime.run_code(
    code="import os; print('set' if os.environ.get('OPENAI_API_KEY') else 'missing')"
).text)

runtime.kill()
client.identity.providers.delete(provider.id)

See Secrets.

Templates

Template	vCPU	Memory	Disk
`python-3.14-base-small`	1	1 GB	2 GB
`python-3.14-base-medium`	1	2 GB	4 GB
`python-3.14-base-large`	2	4 GB	8 GB

Lifecycle

Create from a template (optionally attach Identity providers).
Execute code and commands; attached secrets inject per execution.
Terminate with runtime.kill() when finished.

Create Runtime

Parameters and response fields

Quickstart

First sandbox end to end

Secrets

Inject credentials safely

​What you get

​Why sandboxes

​Basic usage

​With secrets

​Templates

​Lifecycle

​Next