Claude Code on Gravix Layer

Claude Code is Anthropic’s coding agent CLI. On Gravix Layer it runs in a dedicated sandbox — its own filesystem, terminal, and git — with egress you allowlist and secrets you inject. Your laptop stays out of the blast radius.

Why run it on Gravix Layer?

	Local Claude Code	Gravix sandbox
Files & secrets	Same machine as your keys	Isolated; Identity providers inject secrets at exec time
`--dangerously-skip-permissions`	Risky on a developer laptop	Contained in the sandbox (`IS_SANDBOX=1`)
Outbound network	Usually wide open	Deny-by-default; attach an allowlist
Scale	One session per machine	Many sandboxes in parallel; pause, resume, kill

Gravix Layer does not replace Anthropic auth. Claude still calls api.anthropic.com with your ANTHROPIC_API_KEY.

How it fits together

Your script / CLI / CI
        │
        ▼
 Gravix Layer API  ──►  sandbox (claude template)
                           ├─ claude CLI
                           ├─ /workspace
                           ├─ git, python, node
                           └─ network policy → api.anthropic.com (+ hosts you allow)

The `claude` template

Gravix Layer provides a platform template named claude with Claude Code already installed. Use it when you create a runtime:

from gravixlayer import GravixLayer

client = GravixLayer()  # defaults to cloud="aws", region="us-east-1"
sandbox = client.runtime.create(template="claude")

import { GravixLayer } from 'gravixlayer';

const client = new GravixLayer(); // defaults to cloud="aws", region="us-east-1"
const sandbox = await client.runtime.create({ template: 'claude' });

gravixlayer runtime create --template claude --wait

# Requires: GRAVIXLAYER_API_KEY
curl -sS -X POST "https://api.gravixlayer.ai/v1/agents/runtime" \
  -H "Authorization: Bearer $GRAVIXLAYER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"template":"claude","cloud":"aws","region":"us-east-1"}'

The open-source agent-claude.Dockerfile shows what that image includes. Building your own template is optional — only needed if you want extra packages, a baked CLAUDE.md, or other customizations (Custom templates).

Start here

Get started — provider, allowlist, first claude -p, interactive shell
Pick a workflow below when you need more than a smoke test

You want to…	Guide
Run `claude -p` from a script or CI, stream JSON, resume a session	Automate coding tasks
Clone a GitHub repo, edit it, review the diff, push a branch	Edit a repository
Run several jobs at once, pause/resume, cron	Run parallel jobs
Extend the image or register MCP servers	Custom templates & MCP

What you need

Gravix Layer API key
Anthropic API key with Claude Code access
gravixlayer (Python) or gravixlayer (TypeScript), or the Gravix CLI

Guides include Python, TypeScript, CLI, and cURL snippets — start with Get started.

Safety

--dangerously-skip-permissions auto-approves tools inside the sandbox. It does not limit egress. Keep network policies on an allowlist when the agent sees untrusted input or secrets.

​Why run it on Gravix Layer?

​How it fits together

​The claude template

​Start here

​What you need

​Safety