Skip to content

Overview

Run untrusted commands in isolated Linux sandboxes.

Faber runs commands in Linux namespaces with cgroup v2 limits and seccomp policies. A request is a list of steps executed in order inside one sandboxed workspace (/faber). A step is either a single task or an array of tasks that run in parallel.

Every route except /health, /openapi.yaml and /openapi.json requires the API key in the Authorization header, either as Bearer <key> or as the raw key.

Every response carries an x-request-id header. Error responses have the ErrorResponse shape with a stable machine-readable code.

  • License: MIT
  • OpenAPI version: 3.1.0

The API key as a bearer token. The raw key without the Bearer prefix is also accepted.

Security scheme type: http