Skip to main content
POST
/
api
/
v1
/
ssh
/
enable
Enable SSH
curl --request POST \
  --url https://{identifier}.sandbox.tensorlake.ai/api/v1/ssh/enable \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "proxy_pubkey": "<string>",
  "backend_user": "<string>"
}
'
{
  "enabled": true,
  "pid": 123,
  "host_key_fingerprint": "<string>"
}
Enable the sandbox’s internal SSH server for authenticated sandbox-proxy connections.
This endpoint is normally called by Tensorlake’s SSH proxy. Most users should use SSH and PTY Sessions or tl sbx ssh instead of calling this endpoint directly.
The public sandbox proxy authenticates your API key and injects the internal forwarded-auth headers required by the daemon.

​
Endpoint

POST /api/v1/ssh/enable
Use this endpoint on the sandbox proxy host: 
https://<sandbox-id-or-name>.sandbox.tensorlake.ai/api/v1/ssh/enable

​
Example Request

curl -X POST https://<sandbox-id>.sandbox.tensorlake.ai/api/v1/ssh/enable \
  -H "Authorization: Bearer $TENSORLAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "proxy_pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA...",
    "backend_user": "tl-user"
  }'

​
Request Body

{
  "proxy_pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA...",
  "backend_user": "tl-user"
}
  • proxy_pubkey is required. It is the sandbox proxy’s backend public key.
  • backend_user is optional and defaults to tl-user.

​
Response

Tensorlake returns 200 OK with SSH daemon status: 
{
  "enabled": true,
  "pid": 123,
  "host_key_fingerprint": "SHA256:..."
}

Authorizations

​
Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
​
proxy_pubkey
string
required

OpenSSH-format public key line for the sandbox proxy backend identity.

​
backend_user
string

Local POSIX user that the proxy authenticates as. Defaults to tl-user.

Response

SSH daemon status

​
enabled
boolean
required
​
pid
integer<int32> | null
​
host_key_fingerprint
string | null