# Fystash Documentation

> Multi-agent sandbox fabric: Firecracker VMs, shared drive, and fabric messaging. Not an LLM. Topology: GCP nested KVM (`topology=nested`).

## Docs

- [Auth & API keys](https://docs.fystash.ai/api/auth): Org API keys (`key-…`) authenticate control-plane calls.
- [Drive API](https://docs.fystash.ai/api/drive)
- [Fabric API](https://docs.fystash.ai/api/fabric)
- [Standby / resume API](https://docs.fystash.ai/api/lifecycle)
- [API overview](https://docs.fystash.ai/api/overview): Public control plane: `https://api.fystash.ai`
- [Ports API](https://docs.fystash.ai/api/ports)
- [Rooms API](https://docs.fystash.ai/api/rooms)
- [Sandboxes API](https://docs.fystash.ai/api/sandboxes)
- [Usage & audit](https://docs.fystash.ai/api/usage-and-audit)
- [Shared drive](https://docs.fystash.ai/concepts/drive): Durable POSIX artifact filesystem shared by sandboxes in a room.
- [Fabric](https://docs.fystash.ai/concepts/fabric): Low-latency messaging inside a room: send, request/reply, fan-out, barriers.
- [Rooms](https://docs.fystash.ai/concepts/rooms): A room is the run-scoped container for sandboxes, fabric, and drive.
- [Sandboxes](https://docs.fystash.ai/concepts/sandboxes): Isolated Firecracker microVMs — one per agent or worker.
- [Templates](https://docs.fystash.ai/concepts/templates): Golden images used by `from-template` / `sandbox_create`.
- [Connect your agent](https://docs.fystash.ai/get-started/connect-agent): Drive Fystash from Cursor, Claude, or Codex via MCP. Prefer tools over curl.
- [Quickstart](https://docs.fystash.ai/get-started/quickstart): Sign up, copy your API key, run a sandbox hello on public HTTPS.
- [Coding toolchain](https://docs.fystash.ai/guides/coding-toolchain): `git`, `curl`, `python3`, and `node` in the default template.
- [GitHub clone + PR](https://docs.fystash.ai/guides/github-clone-pr): Clone with a token via env, push a branch, open a PR.
- [Software factory demo](https://docs.fystash.ai/guides/software-factory): Flagship multi-agent demo — not the product definition.
- [Core model](https://docs.fystash.ai/introduction/core-model): Org → Room → Sandboxes[] + Fabric + Drive
- [Overview](https://docs.fystash.ai/introduction/overview): Fystash is a multi-agent sandbox fabric: Firecracker microVMs, a shared POSIX drive, and fabric messaging. Not an LLM.
- [MCP install](https://docs.fystash.ai/mcp/install): Stdio MCP server for the Fystash control plane.
- [MCP tools](https://docs.fystash.ai/mcp/tools): Tool ↔ REST map. Prefer these over inventing curl.
- [Credits & pricing](https://docs.fystash.ai/pricing/credits): Agent-hours and Starter entitlement. Source of truth: [fystash.ai/pricing](https://fystash.ai/pricing).
- [Browser template](https://docs.fystash.ai/sandboxes/browser): Chromium + CDP for agent browser automation.
- [Create & exec](https://docs.fystash.ai/sandboxes/create-and-exec): Room → from-template → exec. Prefer MCP.
- [Desktop template](https://docs.fystash.ai/sandboxes/desktop): XFCE desktop with computer-use helpers and noVNC preview.
- [Docker template](https://docs.fystash.ai/sandboxes/docker): Docker Engine inside the guest for Compose, build, and pull.
- [Egress allowlist](https://docs.fystash.ai/sandboxes/egress): Opt-in outbound restriction per sandbox. Default is open egress.
- [Env & secrets](https://docs.fystash.ai/sandboxes/env-and-secrets): Pass string env maps at create; optionally override per exec. No vault — the agent supplies tokens.
- [Filesystem (drive)](https://docs.fystash.ai/sandboxes/filesystem): Read and write room drive paths from MCP or REST.
- [Ports & preview](https://docs.fystash.ai/sandboxes/ports-and-preview): Expose a guest port as a public HTTPS preview URL.
- [Standby & resume](https://docs.fystash.ai/sandboxes/standby-and-resume): Pause a sandbox to snapshot; resume later without a full cold create.
- [Python SDK](https://docs.fystash.ai/sdk/python): In-guest fabric client (`fystash.FystashClient`). Control-plane HTTP is typically via MCP or raw REST.
- [TypeScript SDK](https://docs.fystash.ai/sdk/typescript): `@fystash_ai/sdk` — `RoomClient` (HTTP) and `FystashClient` (in-guest fabric wire).
- [Tenancy & security](https://docs.fystash.ai/security/tenancy): Org isolation, room boundaries, and soft quotas.