# kosa8 docs

> kosa8 makes sealed sandboxes for AI agents (coding agents, data analysis, evals and RL rollouts, agent frameworks, MCP tools): each agent runs code unattended in a microVM of its own. On your Mac, Linux or Windows machine you can checkpoint, rewind any mistake and fork; kosa8 Cloud runs sandboxes on kosa8's hosts, billed per second; and it also runs on your own servers or fully air-gapped. These docs cover every guide and every command, generated from the binary.

Product site: https://kosa8.com/ (pricing, download, how-to guides at https://kosa8.com/guides/)

## For AI agents
- [AGENTS.md](https://docs.kosa8.com/AGENTS.md): set kosa8 up for the person you work for, and run tasks in sandboxes (`kosa8 prompt`, MCP tools)
- [Everything in one file](https://docs.kosa8.com/llms-full.txt): every guide and command as markdown

## Pricing
- [Plans](https://kosa8.com/pricing/): signing in or up (`kosa8 login`, in the browser, or `kosa8 signup` with the person's email) gives the free tier: sandboxes, save and undo, the dashboard, no card. Forks, local models, Explore, the assistant and governance need a plan, from $29 a month, $30 off the first payment; the checkout takes a card. There is no time-limited trial. `kosa8 license status --json` shows the plan, and `kosa8 upgrade --no-open` prints the checkout link for the plan that fits
- When kosa8 says it needs a plan: run with `--json` and every refusal at a plan limit (forks, sandbox disk, a product the free tier or plan lacks) carries `upgrade: {plan, price_usd, url, command, first_payment_discount_usd}`. Relay it to the person; never buy or turn on overage yourself ([details](https://docs.kosa8.com/AGENTS.md))
- [kosa8 Cloud rate card, as JSON](https://api.kosa8.com/v1/pricing): billed per second; an organization needs a payment method before its first sandbox, and gets $30 of credit once a card is on file

## Guides
- [Agent identity](https://docs.kosa8.com/guides/agent-identity.md): Give each AI agent a token the service verifies, so policy can differ between agents and the audit log names which one acted.
- [Let your agent set kosa8 up](https://docs.kosa8.com/guides/agent-setup.md): Point Claude Code, Codex or Cursor at kosa8.com/AGENTS.md and it installs kosa8, asks you for the sign-up code, and runs its work in sandboxes.
- [Run an AI assistant](https://docs.kosa8.com/guides/agents.md): Claude Code, Codex, Gemini and others, each in a sealed machine that can only reach what you allow — and never holds your API key.
- [The audit log](https://docs.kosa8.com/guides/audit.md): What kosa8 writes down about every action, how to read it, and how to prove nobody edited it.
- [kosa8 sandbox GitHub Action](https://docs.kosa8.com/guides/cloud-github-action.md): Run a command in a sealed kosa8 Cloud sandbox from a GitHub Actions workflow: create, run, print the output, set exit-code and sandbox-id, delete.
- [kosa8 Cloud MCP server](https://docs.kosa8.com/guides/cloud-mcp.md): Connect Claude Code, Cursor, Codex or any MCP client to kosa8 Cloud with one command: a remote MCP server at api.kosa8.com/mcp that creates sandboxes and runs commands in them.
- [kosa8 Cloud OpenAPI and llms.txt](https://docs.kosa8.com/guides/cloud-openapi.md): The kosa8 Cloud API described as OpenAPI 3.1 at api.kosa8.com/openapi.json, and in plain text for AI agents at api.kosa8.com/llms.txt.
- [Webhook recipes](https://docs.kosa8.com/guides/cloud-webhooks.md): Verify the Kosa8-Signature header on kosa8 Cloud webhooks in Node, Python and Go, and forward sandbox.error and spending_cap.reached to Slack.
- [kosa8 Cloud](https://docs.kosa8.com/guides/cloud.md): Run kosa8 sandboxes and functions on our hosts: sign up at app.kosa8.com, add a payment method, make an API key, and call it from the SDKs or plain HTTP.
- [Connect Claude, Cursor or Codex](https://docs.kosa8.com/guides/connect-agents.md): Give your AI coding agent kosa8 sandboxes in two commands: kosa8 mcp install adds the tools, kosa8 skill install teaches the agent when to use them.
- [Keep API keys out of the sandbox](https://docs.kosa8.com/guides/credentials.md): How kosa8's egress broker lets an AI agent use an API key it never holds: the sandbox gets a placeholder, and the real key is added on your computer.
- [The desktop app](https://docs.kosa8.com/guides/desk.md): A window onto every machine, container and save point — including the tree of what came from what.
- [For developers](https://docs.kosa8.com/guides/developers.md): Build kosa8 from source, find your way around the packages, drive the service from your own program, and run the tests.
- [Try several ideas at once](https://docs.kosa8.com/guides/explore.md): Fork a machine per idea, run them in parallel, and let kosa8 report which worked.
- [Your first sandbox](https://docs.kosa8.com/guides/first-sandbox.md): Make a sealed machine, run something inside it, and see why it is not just a container.
- [Go API reference](https://docs.kosa8.com/guides/go-api.md): Every exported type, field, function, method and constant of github.com/kosa8ai/kosa8-go v0.1.2, with exact signatures, the HTTP calls each method makes, what it returns and how it fails.
- [Go errors and troubleshooting](https://docs.kosa8.com/guides/go-errors.md): Every error kosa8-go v0.1.2 returns: the Error type and its Kind, errors.Is and errors.As usage, when each kind happens with real messages from kosa8 0.9.36, how to handle it, and a symptom-to-fix troubleshooting table.
- [Go developer guide](https://docs.kosa8.com/guides/go-guide.md): Everything kosa8-go v0.1.2 can do, explained in plain words first and then in depth: connecting, contexts and timeouts, goroutine safety, sandboxes, running code, streaming and stdin, checkpoints shared with the CLI, snapshots, fork and explore, and tested recipes.
- [Go quickstart](https://docs.kosa8.com/guides/go-quickstart.md): Run code in a sealed microVM sandbox from Go in five minutes: install kosa8-go, connect to the daemon, create a sandbox with no network, run a command, checkpoint, rewind and delete. Every step with its real output.
- [Company rules](https://docs.kosa8.com/guides/governance.md): Signed policy that a laptop cannot edit its way around, and a record of every decision.
- [How kosa8 works](https://docs.kosa8.com/guides/how-it-works.md): The parts of kosa8, what runs where, and what crosses each boundary — with the picture.
- [Install kosa8](https://docs.kosa8.com/guides/install.md): One line in a terminal, or the Mac app. Both take about a minute.
- [Java API reference](https://docs.kosa8.com/guides/java-api.md): Every public class, constructor, method, builder option and record of com.kosa8:kosa8 0.1.2, with exact signatures, defaults, the HTTP calls each method makes, what it returns and what it throws.
- [Java errors and troubleshooting](https://docs.kosa8.com/guides/java-errors.md): Every exception the kosa8 Java SDK throws: the class hierarchy, checked or unchecked, when each is thrown, its fields, real messages from kosa8 0.9.36, and a troubleshooting table from symptom to cause to fix.
- [Java developer guide](https://docs.kosa8.com/guides/java-guide.md): Everything the kosa8 Java SDK does, in plain words first and then in depth: connecting locally or to a remote worker, sandboxes and network rules, run, exec, stdin and attach, streaming and timeouts, snapshots, fork and explore, checkpoints shared with the CLI, thread safety, and tested recipes.
- [Java quickstart](https://docs.kosa8.com/guides/java-quickstart.md): Run code in a sealed microVM sandbox from Java in five minutes: add com.kosa8:kosa8 0.1.2 with Maven or Gradle, connect to the daemon, create a sandbox with no network, run a command, checkpoint, rewind and delete. Every step with its real output.
- [Vercel AI SDK 7 adapter](https://docs.kosa8.com/guides/js-ai-sdk.md): @kosa8/ai-sdk-sandbox: run an AI SDK agent's files and commands in a kosa8 microVM. Sessions, the work container, restricted(), templates, network policy, stop and resume, destroy, and a full generateText agent.
- [API reference (JavaScript)](https://docs.kosa8.com/guides/js-api.md): Every exported function, class, type and option of @kosa8/sdk 0.1.0 and @kosa8/ai-sdk-sandbox 0.1.0, checked against their .d.ts files.
- [Approvals and policy (JavaScript)](https://docs.kosa8.com/guides/js-approvals.md): When an org policy wants named people to approve an action, @kosa8/sdk throws Kosa8ApprovalRequiredError. How a human approves through the CLI, and how your code repeats the call with the approval id.
- [Checkpoints and rewind (JavaScript)](https://docs.kosa8.com/guides/js-checkpoints.md): Save a running kosa8 sandbox before a risky step and put it back in about half a second, processes and all, from Node. How checkpoints are stored and shared with the CLI.
- [Connecting (JavaScript)](https://docs.kosa8.com/guides/js-connecting.md): How @kosa8/sdk finds the daemon: the default socket, socketPath, KOSA8_HOST forms, KOSA8_TOKEN, KOSA8_INSECURE, the actor and agent-token headers, and remote workers.
- [Errors reference (JavaScript)](https://docs.kosa8.com/guides/js-errors.md): Every error class @kosa8/sdk throws: when it is thrown, its fields, a real message from kosa8 v0.9.10, and how to handle it.
- [Files (JavaScript)](https://docs.kosa8.com/guides/js-files.md): Get files into and out of a kosa8 sandbox from Node: through exec with base64, through a host folder mount, or with the AI SDK adapter's read and write methods.
- [Fork and explore (JavaScript)](https://docs.kosa8.com/guides/js-fork-explore.md): Copy a running kosa8 sandbox into live, independent copies from Node, and run several approaches in parallel to keep the fastest one that works (best-of-N).
- [Install and prerequisites (JavaScript)](https://docs.kosa8.com/guides/js-install.md): Install kosa8 and start its daemon, install @kosa8/sdk or @kosa8/ai-sdk-sandbox, check the connection with health() and version(), and set up TypeScript.
- [Network and secrets (JavaScript)](https://docs.kosa8.com/guides/js-network.md): Set a kosa8 sandbox's egress from Node: deny, any, fakenet or an allow-list; read what was refused; and use the credential broker so the agent never holds an API key.
- [JavaScript and TypeScript: choosing a path](https://docs.kosa8.com/guides/js-overview.md): Four ways to drive kosa8 from Node: the @kosa8/sdk client, the Vercel AI SDK adapter, MCP, and the Docker API. What each is for, with a decision table.
- [Quickstart (@kosa8/sdk)](https://docs.kosa8.com/guides/js-quickstart.md): Your first kosa8 sandbox from Node in five steps: connect, create a sealed microVM, run a command, exec into a container, then checkpoint and rewind. Each step with its real output.
- [Recipes (JavaScript)](https://docs.kosa8.com/guides/js-recipes.md): Complete, tested Node programs for kosa8: run LLM-generated code safely, a coding agent on a mounted repo, parallel test variants, checkpoint before a migration, an Express or Next.js route, CI, MCP from TypeScript frameworks, and dockerode or Testcontainers.
- [Running code (JavaScript)](https://docs.kosa8.com/guides/js-running-code.md): run, exec, execFrames, startContainer, startInteractive, writeStdin and attach in @kosa8/sdk: streaming output, exit codes as results, stdin, time limits and stream errors.
- [Sandboxes (JavaScript)](https://docs.kosa8.com/guides/js-sandboxes.md): Create kosa8 sandboxes from Node with cpus, memory, disk, mounts, labels, packet capture and a broker; list, get, stop, start, delete and wipe them; manage their images and containers.
- [Snapshots (JavaScript)](https://docs.kosa8.com/guides/js-snapshots.md): Save a running kosa8 sandbox as a named snapshot from Node, restore it as many times as you like, encrypt it, and restore a sealed snapshot whose seal does not verify.
- [Troubleshooting (JavaScript)](https://docs.kosa8.com/guides/js-troubleshooting.md): Problems you can meet driving kosa8 from Node, with the real messages: daemon not running, socket path length on macOS, a locked Mac, disk space, Node versions, egress refusals, approvals, and a script that does not exit.
- [Writing a kit](https://docs.kosa8.com/guides/kits.md): Describe the environment an agent runs in: its image, what is installed, the one folder it sees, the hosts it reaches and the keys it uses.
- [Tool servers (MCP)](https://docs.kosa8.com/guides/mcp-servers.md): Run third-party MCP servers behind kosa8's gateway: each in its own sandbox, with pinned tool definitions and checked arguments.
- [Local models](https://docs.kosa8.com/guides/models.md): Run AI on your own machine. Nothing sent out, nothing charged per word.
- [Native HTTP API](https://docs.kosa8.com/guides/native-api.md): The kosa8 daemon's /kosa8/v1 API that every SDK is built on: transport, headers, streaming frames, errors, and each sandbox, process, snapshot and fork endpoint with its request and response.
- [Network rules](https://docs.kosa8.com/guides/network.md): What a kosa8 sandbox can reach, how to say so, and where it is enforced: the guard on your computer, DNS answered on the host, and the egress broker on top.
- [Policy reference](https://docs.kosa8.com/guides/policy-reference.md): Every field of the two signed policy documents, where each is enforced, and what happens when a policy is missing or edited.
- [One task, one sandbox](https://docs.kosa8.com/guides/prompt.md): kosa8 prompt gives a coding agent one task in a fresh sandbox that sees one folder, holds no API key and is removed when the agent is done.
- [Python API reference](https://docs.kosa8.com/guides/py-api.md): Every public class, function, method, constant and dataclass of the kosa8 Python SDK 0.1.1: exact signatures, parameters, defaults, return shapes, endpoints and errors.
- [Python errors and troubleshooting](https://docs.kosa8.com/guides/py-errors.md): Every exception the kosa8 Python SDK (0.1.1) raises: when it is raised, its attributes, a real message from kosa8 0.9.36, and what to do. Plus a troubleshooting table of symptoms, causes and fixes: daemon not running, socket paths, names in use, timeouts, stdin, failed rewinds, checkpoint races and pip on macOS.
- [Python: OpenAI Agents SDK and LangChain](https://docs.kosa8.com/guides/py-frameworks.md): Give an OpenAI Agents SDK or LangChain/LangGraph agent a kosa8 sandbox as tools: run code, a shell that keeps cd, files, git and preview links, with errors handed back to the model as text.
- [Python developer guide](https://docs.kosa8.com/guides/py-guide.md): Everything the kosa8 Python SDK does, in depth: connecting (socket, KOSA8_HOST, tokens, timeouts), sandboxes and egress, run, exec, stdin and attach, snapshots, fork, explore, checkpoints and the shared checkpoints.json, threads and asyncio, and patterns for AI agent loops. Tested against kosa8 0.9.36.
- [Python quickstart](https://docs.kosa8.com/guides/py-quickstart.md): Run code in a sealed microVM sandbox from Python in five minutes: install the kosa8 package with pip or uv, connect to the daemon, create a sandbox with no network, run a command, checkpoint, rewind and delete. Every step with its real output.
- [Python: RL rollouts and evals](https://docs.kosa8.com/guides/py-rl-eval.md): Use kosa8 sandboxes for reinforcement learning and evals in Python: one sealed environment per episode, fork a prepared state into many, checkpoint and rewind mid-episode, score by running tests, and clean up with ephemeral sandboxes.
- [Ruby API reference](https://docs.kosa8.com/guides/rb-api.md): Every public class, method, keyword argument, default, return value and exception of the kosa8 Ruby gem 0.1.2, with the HTTP call each method makes, copied from the source.
- [Ruby errors and troubleshooting](https://docs.kosa8.com/guides/rb-errors.md): Every exception the kosa8 Ruby gem 0.1.2 raises: the class hierarchy, when each is raised, its fields, a real message from kosa8 0.9.36, and how to handle it. Then a troubleshooting table from symptom to cause to fix.
- [Ruby developer guide](https://docs.kosa8.com/guides/rb-guide.md): Everything the kosa8 Ruby gem does, explained simply and then in depth: sandboxes, network rules, run, exec, stdin and attach, snapshots, fork, explore, checkpoints shared with the CLI, environment variables, threads, timeouts, and recipes for agent loops and clean-up.
- [Ruby quickstart](https://docs.kosa8.com/guides/rb-quickstart.md): Run code in a sealed microVM sandbox from Ruby in five minutes: install the kosa8 gem, connect to the daemon, create a sandbox with no network, run a command, checkpoint, rewind and delete. Every step with its real output.
- [Refer and earn](https://docs.kosa8.com/guides/refer.md): Give $30, get $30 of kosa8 Cloud credit for each team you invite, or join the affiliate program for 20% of their payments for 12 months. Your link, the exact rules, and where to see what you earned.
- [SDKs in five languages](https://docs.kosa8.com/guides/sdks.md): Drive kosa8 from Python, TypeScript, Go, Ruby or Java. What the SDKs do in plain words, how to install each, and which page to read next.
- [Securing an agent](https://docs.kosa8.com/guides/secure-agents.md): Everything kosa8 does to secure an AI agent itself, not only the sandbox around it: the layers, the threats each one answers, and what none of them do.
- [When something is wrong](https://docs.kosa8.com/guides/self-repair.md): kosa8 doctor finds it, explains why it matters, and repairs what is safe to repair.
- [Rules for tool calls](https://docs.kosa8.com/guides/tool-rules.md): Decide an AI agent's tool call by its arguments: allow it, deny it, or hold it until a person approves that exact call.
- [Agent troubleshooting](https://docs.kosa8.com/guides/troubleshooting.md): Every refusal and warning an agent or its user can meet, what each one means and what to do about it.
- [Save and undo](https://docs.kosa8.com/guides/undo.md): Checkpoint before something risky, rewind after it goes wrong. About a second either way.

## Command reference
- [Every command](https://docs.kosa8.com/reference/): index
- [kosa8 agent](https://docs.kosa8.com/reference/agent.md): Run coding agents in isolated sandboxes
- [kosa8 agent init](https://docs.kosa8.com/reference/agent-init.md): Write a built-in kit to ~/.kosa8/kits so it can be customized
- [kosa8 agent kits](https://docs.kosa8.com/reference/agent-kits.md): List available sandbox kits
- [kosa8 agent run](https://docs.kosa8.com/reference/agent-run.md): Start an agent sandbox from a kit
- [kosa8 agent sign](https://docs.kosa8.com/reference/agent-sign.md): Sign a kit file with the org's policy key
- [kosa8 agent token](https://docs.kosa8.com/reference/agent-token.md): Give an agent an identity the daemon can check
- [kosa8 agent token create](https://docs.kosa8.com/reference/agent-token-create.md): Mint an identity and print its token, once
- [kosa8 agent token ls](https://docs.kosa8.com/reference/agent-token-ls.md): List agent identities
- [kosa8 agent token revoke](https://docs.kosa8.com/reference/agent-token-revoke.md): End an agent identity at once
- [kosa8 ai](https://docs.kosa8.com/reference/ai.md): Chat with kosa8's embedded assistant (approval-first, live state)
- [kosa8 ai bom](https://docs.kosa8.com/reference/ai-bom.md): Write a CycloneDX 1.6 AI bill of materials for a sandbox, session or model
- [kosa8 ai replay](https://docs.kosa8.com/reference/ai-replay.md): Read back a model gateway session's replay record and check it against the audit log
- [kosa8 approve](https://docs.kosa8.com/reference/approve.md): See what an action would do, and decide what may run unprompted
- [kosa8 approve add](https://docs.kosa8.com/reference/approve-add.md): File approvals sent back by approvers against their request
- [kosa8 approve allow](https://docs.kosa8.com/reference/approve-allow.md): Let a trusted kind of action run without asking
- [kosa8 approve check](https://docs.kosa8.com/reference/approve-check.md): Show what an action would do and whether it needs approval
- [kosa8 approve deny](https://docs.kosa8.com/reference/approve-deny.md): Refuse a kind of action outright, without even prompting
- [kosa8 approve ls](https://docs.kosa8.com/reference/approve-ls.md): Show what may run without asking
- [kosa8 approve pending](https://docs.kosa8.com/reference/approve-pending.md): List approval requests on this machine that have not been used
- [kosa8 approve request](https://docs.kosa8.com/reference/approve-request.md): Ask for signed approvals of an action the org policy covers
- [kosa8 approve revoke](https://docs.kosa8.com/reference/approve-revoke.md): Go back to being asked about a kind of action
- [kosa8 approve sign](https://docs.kosa8.com/reference/approve-sign.md): Approve someone else's request, signed with your identity
- [kosa8 approve status](https://docs.kosa8.com/reference/approve-status.md): Show whether a request has the approvals it needs, and who is still missing
- [kosa8 attach](https://docs.kosa8.com/reference/attach.md): Attach to a running container's output
- [kosa8 audit](https://docs.kosa8.com/reference/audit.md): Inspect what was done, by whom
- [kosa8 audit export](https://docs.kosa8.com/reference/audit-export.md): Export the full audit log for a SIEM (--format jsonl|cef)
- [kosa8 audit forward](https://docs.kosa8.com/reference/audit-forward.md): Ship audit entries to the configured SIEM sinks (syslog, Splunk HEC, HTTPS)
- [kosa8 audit key](https://docs.kosa8.com/reference/audit-key.md): Print the public keys that sign the audit log
- [kosa8 audit ls](https://docs.kosa8.com/reference/audit-ls.md): Show recent audited actions
- [kosa8 audit prune](https://docs.kosa8.com/reference/audit-prune.md): Apply the retention policy now: seal old entries and remove them from the live log
- [kosa8 audit status](https://docs.kosa8.com/reference/audit-status.md): Show where audit entries are forwarded, how far each sink has got, and retention
- [kosa8 audit verify](https://docs.kosa8.com/reference/audit-verify.md): Check that the audit log has not been altered
- [kosa8 build](https://docs.kosa8.com/reference/build.md): Build an image from a Dockerfile
- [kosa8 builder](https://docs.kosa8.com/reference/builder.md): Manage the BuildKit builder
- [kosa8 builder prune](https://docs.kosa8.com/reference/builder-prune.md): Clear the build cache
- [kosa8 checkpoint](https://docs.kosa8.com/reference/checkpoint.md): Save a restore point you can rewind to
- [kosa8 checkpoint ls](https://docs.kosa8.com/reference/checkpoint-ls.md): List the restore points for a sandbox
- [kosa8 cloud](https://docs.kosa8.com/reference/cloud.md): Run sandboxes on kosa8 Cloud (api.kosa8.com)
- [kosa8 cloud login](https://docs.kosa8.com/reference/cloud-login.md): Sign in to kosa8 Cloud: in your browser, or with an API key
- [kosa8 cloud logout](https://docs.kosa8.com/reference/cloud-logout.md): Forget the kosa8 Cloud key on this machine
- [kosa8 cloud mcp](https://docs.kosa8.com/reference/cloud-mcp.md): Connect Claude Code, Cursor or Codex to kosa8 Cloud's MCP server
- [kosa8 cloud open](https://docs.kosa8.com/reference/cloud-open.md): Open the kosa8 Cloud dashboard, at a sandbox if given
- [kosa8 cloud refer](https://docs.kosa8.com/reference/cloud-refer.md): Show your Refer and earn link, earnings and invitations
- [kosa8 cloud sandbox](https://docs.kosa8.com/reference/cloud-sandbox.md): Make, list, run in, sleep, wake and remove cloud sandboxes
- [kosa8 cloud sandbox create](https://docs.kosa8.com/reference/cloud-sandbox-create.md): Make a cloud sandbox and print its ID and dashboard link
- [kosa8 cloud sandbox exec](https://docs.kosa8.com/reference/cloud-sandbox-exec.md): Run a command in a cloud sandbox and print its output
- [kosa8 cloud sandbox get](https://docs.kosa8.com/reference/cloud-sandbox-get.md): Show one cloud sandbox
- [kosa8 cloud sandbox ls](https://docs.kosa8.com/reference/cloud-sandbox-ls.md): List the organization's cloud sandboxes
- [kosa8 cloud sandbox rm](https://docs.kosa8.com/reference/cloud-sandbox-rm.md): Delete cloud sandboxes; their disks are wiped
- [kosa8 cloud sandbox sleep](https://docs.kosa8.com/reference/cloud-sandbox-sleep.md): Snapshot a sandbox and free its memory; it pays only for disk until it wakes
- [kosa8 cloud sandbox wake](https://docs.kosa8.com/reference/cloud-sandbox-wake.md): Restore a sleeping sandbox now, rather than on its next exec
- [kosa8 cloud usage](https://docs.kosa8.com/reference/cloud-usage.md): Show this month's kosa8 Cloud usage and estimated bill
- [kosa8 cloud whoami](https://docs.kosa8.com/reference/cloud-whoami.md): Show the kosa8 Cloud organization and key in use
- [kosa8 commit](https://docs.kosa8.com/reference/commit.md): Create an image from a container's filesystem
- [kosa8 cp](https://docs.kosa8.com/reference/cp.md): Copy files between the host and a container (CONTAINER:PATH)
- [kosa8 create](https://docs.kosa8.com/reference/create.md): Create a container without starting it
- [kosa8 daemon](https://docs.kosa8.com/reference/daemon.md): Manage the kosa8d daemon
- [kosa8 daemon start](https://docs.kosa8.com/reference/daemon-start.md): Start kosa8d in the background
- [kosa8 daemon status](https://docs.kosa8.com/reference/daemon-status.md): Show daemon status
- [kosa8 daemon stop](https://docs.kosa8.com/reference/daemon-stop.md): Stop the daemon
- [kosa8 desk](https://docs.kosa8.com/reference/desk.md): Open the local dashboard in a browser
- [kosa8 diff](https://docs.kosa8.com/reference/diff.md): Show filesystem changes made to a container
- [kosa8 doctor](https://docs.kosa8.com/reference/doctor.md): Check that this machine can run kosa8, and repair what is safe to repair
- [kosa8 events](https://docs.kosa8.com/reference/events.md): Stream engine events
- [kosa8 evidence](https://docs.kosa8.com/reference/evidence.md): Export and verify signed evidence packages
- [kosa8 evidence export](https://docs.kosa8.com/reference/evidence-export.md): Write a signed evidence package for a sandbox, snapshot, approval or time range
- [kosa8 evidence verify](https://docs.kosa8.com/reference/evidence-verify.md): Check an evidence package using nothing but the package
- [kosa8 exec](https://docs.kosa8.com/reference/exec.md): Run a command in a running container
- [kosa8 explore](https://docs.kosa8.com/reference/explore.md): Fork a sandbox per approach, run each, and report which worked
- [kosa8 export](https://docs.kosa8.com/reference/export.md): Export a container's filesystem as a tar archive
- [kosa8 fork](https://docs.kosa8.com/reference/fork.md): Fork a running sandbox into N live copies with process state intact
- [kosa8 history](https://docs.kosa8.com/reference/history.md): Show the layer history of an image
- [kosa8 identity](https://docs.kosa8.com/reference/identity.md): Your personal signing key, for approvals that name who approved
- [kosa8 identity init](https://docs.kosa8.com/reference/identity-init.md): Create your signing identity
- [kosa8 identity show](https://docs.kosa8.com/reference/identity-show.md): Print your public identity, ready to add to an org policy
- [kosa8 images](https://docs.kosa8.com/reference/images.md): List images in the engine
- [kosa8 import](https://docs.kosa8.com/reference/import.md): Create an image from a rootfs tar archive
- [kosa8 info](https://docs.kosa8.com/reference/info.md): Show engine and system information
- [kosa8 inspect](https://docs.kosa8.com/reference/inspect.md): Show detailed container state
- [kosa8 key](https://docs.kosa8.com/reference/key.md): Manage the keys that encrypt snapshots at rest and in transit
- [kosa8 key export](https://docs.kosa8.com/reference/key-export.md): Write the active KEK to a file, to import on another machine
- [kosa8 key import](https://docs.kosa8.com/reference/key-import.md): Add a KEK exported from another machine and make it active
- [kosa8 key rotate](https://docs.kosa8.com/reference/key-rotate.md): Rewrap every snapshot key under a new KEK and destroy the old one
- [kosa8 key status](https://docs.kosa8.com/reference/key-status.md): Show the key provider, the KEKs held, and how many snapshot keys they wrap
- [kosa8 kill](https://docs.kosa8.com/reference/kill.md): Kill a running container
- [kosa8 lab](https://docs.kosa8.com/reference/lab.md): Detonate malware on a simulated internet and produce signed reports
- [kosa8 lab ca](https://docs.kosa8.com/reference/lab-ca.md): Print the lab CA certificate, to install in images that should trust fakenet's HTTPS
- [kosa8 lab detonate](https://docs.kosa8.com/reference/lab-detonate.md): Run a sample in a fakenet sandbox and write a signed report
- [kosa8 lab diff](https://docs.kosa8.com/reference/lab-diff.md): Compare two detonation reports: files, network indicators, processes
- [kosa8 lab net](https://docs.kosa8.com/reference/lab-net.md): Show what a fakenet sandbox has done on the simulated internet
- [kosa8 lab verify](https://docs.kosa8.com/reference/lab-verify.md): Check a detonation report package, offline
- [kosa8 label](https://docs.kosa8.com/reference/label.md): Show classification labels and relabel sandboxes
- [kosa8 label ls](https://docs.kosa8.com/reference/label-ls.md): Show the label lattice in force and what is labelled on this host
- [kosa8 label relabel](https://docs.kosa8.com/reference/label-relabel.md): Change a sandbox's classification (lowering it needs signed approvals)
- [kosa8 license](https://docs.kosa8.com/reference/license.md): Activate and inspect your kosa8 subscription
- [kosa8 license activate](https://docs.kosa8.com/reference/license-activate.md): Activate a licence key on this machine
- [kosa8 license install](https://docs.kosa8.com/reference/license-install.md): Install an offline site licence (air-gapped deployments)
- [kosa8 license overage](https://docs.kosa8.com/reference/license-overage.md): Let forks run above your plan's limit, billed per fork-hour
- [kosa8 license refresh](https://docs.kosa8.com/reference/license-refresh.md): Re-check the licence with Polar
- [kosa8 license status](https://docs.kosa8.com/reference/license-status.md): Show the active plan and its limits
- [kosa8 load](https://docs.kosa8.com/reference/load.md): Load an image from an OCI archive
- [kosa8 login](https://docs.kosa8.com/reference/login.md): Sign in to your kosa8 account in the browser (or, with SERVER, to a registry)
- [kosa8 logout](https://docs.kosa8.com/reference/logout.md): Sign out of your kosa8 account on this machine (or, with SERVER, a registry)
- [kosa8 logs](https://docs.kosa8.com/reference/logs.md): Fetch the logs of a container
- [kosa8 manifest](https://docs.kosa8.com/reference/manifest.md): Inspect image manifests in a registry
- [kosa8 manifest inspect](https://docs.kosa8.com/reference/manifest-inspect.md): Show a remote image's manifest
- [kosa8 mcp](https://docs.kosa8.com/reference/mcp.md): Run kosa8 as an MCP server so AI agents can drive it
- [kosa8 mcp add](https://docs.kosa8.com/reference/mcp-add.md): Register a third-party MCP server to run sandboxed behind the gateway
- [kosa8 mcp approve](https://docs.kosa8.com/reference/mcp-approve.md): Approve one held tool call
- [kosa8 mcp asks](https://docs.kosa8.com/reference/mcp-asks.md): List tool calls waiting for a person's approval
- [kosa8 mcp install](https://docs.kosa8.com/reference/mcp-install.md): Register kosa8 as an MCP server with Claude, Cursor, Windsurf or Codex
- [kosa8 mcp ls](https://docs.kosa8.com/reference/mcp-ls.md): List registered third-party MCP servers
- [kosa8 mcp pins](https://docs.kosa8.com/reference/mcp-pins.md): Review the tool definitions each MCP server is pinned to
- [kosa8 mcp pins approve](https://docs.kosa8.com/reference/mcp-pins-approve.md): Accept a server's changed or new tool definitions
- [kosa8 mcp pins diff](https://docs.kosa8.com/reference/mcp-pins-diff.md): Show what changed in a server's withheld tool definitions
- [kosa8 mcp pins reset](https://docs.kosa8.com/reference/mcp-pins-reset.md): Forget a server's pins, so it is pinned afresh on next start
- [kosa8 mcp pins show](https://docs.kosa8.com/reference/mcp-pins-show.md): Show pinned tool digests, in the form an org policy pins them
- [kosa8 mcp refuse](https://docs.kosa8.com/reference/mcp-refuse.md): Refuse one held tool call
- [kosa8 mcp rm](https://docs.kosa8.com/reference/mcp-rm.md): Unregister a third-party MCP server
- [kosa8 mcp serve](https://docs.kosa8.com/reference/mcp-serve.md): Serve the MCP endpoint over stdio, or HTTP with --http
- [kosa8 mcp tools](https://docs.kosa8.com/reference/mcp-tools.md): List the tools kosa8 exposes to agents
- [kosa8 mcp-policy](https://docs.kosa8.com/reference/mcp-policy.md): Govern which MCP servers and tools each team may use
- [kosa8 mcp-policy check](https://docs.kosa8.com/reference/mcp-policy-check.md): Ask whether a scope may call a tool, and record the decision
- [kosa8 mcp-policy events](https://docs.kosa8.com/reference/mcp-policy-events.md): Export MCP policy decisions for a SIEM (--format jsonl|cef)
- [kosa8 mcp-policy init](https://docs.kosa8.com/reference/mcp-policy-init.md): Print a template MCP policy to edit and sign
- [kosa8 mcp-policy install](https://docs.kosa8.com/reference/mcp-policy-install.md): Verify a signed MCP policy against the trusted key and activate it
- [kosa8 mcp-policy scopes](https://docs.kosa8.com/reference/mcp-policy-scopes.md): List the scopes the org policy defines
- [kosa8 mcp-policy show](https://docs.kosa8.com/reference/mcp-policy-show.md): Show the active MCP policy
- [kosa8 mcp-policy sign](https://docs.kosa8.com/reference/mcp-policy-sign.md): Sign an MCP policy with your org's ed25519 private key
- [kosa8 model](https://docs.kosa8.com/reference/model.md): Pull and serve local models (OpenAI- and Anthropic-compatible)
- [kosa8 model check](https://docs.kosa8.com/reference/model-check.md): Measure a model and say whether the org policy lets it be served, and why
- [kosa8 model ls](https://docs.kosa8.com/reference/model-ls.md): List locally stored models
- [kosa8 model pull](https://docs.kosa8.com/reference/model-pull.md): Download a GGUF model from Hugging Face (org/repo[:quant])
- [kosa8 model pull-oci](https://docs.kosa8.com/reference/model-pull-oci.md): Install a model published to an OCI registry
- [kosa8 model push](https://docs.kosa8.com/reference/model-push.md): Publish a local model to an OCI registry as an artifact
- [kosa8 model rm](https://docs.kosa8.com/reference/model-rm.md): Delete a local model
- [kosa8 model serve](https://docs.kosa8.com/reference/model-serve.md): Serve a model on the local gateway until interrupted
- [kosa8 model sign](https://docs.kosa8.com/reference/model-sign.md): Sign a model's weights digest, for an approved model list that requires a signer
- [kosa8 network](https://docs.kosa8.com/reference/network.md): Manage container networks
- [kosa8 network create](https://docs.kosa8.com/reference/network-create.md): Create a user-defined bridge network
- [kosa8 network ls](https://docs.kosa8.com/reference/network-ls.md): List networks
- [kosa8 network rm](https://docs.kosa8.com/reference/network-rm.md): Remove a network
- [kosa8 pause](https://docs.kosa8.com/reference/pause.md): Pause all processes in a container
- [kosa8 policy](https://docs.kosa8.com/reference/policy.md): Org policy profiles: signed, verified, enforced client-side
- [kosa8 policy init](https://docs.kosa8.com/reference/policy-init.md): Print a template policy profile to edit and sign
- [kosa8 policy install](https://docs.kosa8.com/reference/policy-install.md): Verify a signed profile against the trusted key and activate it
- [kosa8 policy keygen](https://docs.kosa8.com/reference/policy-keygen.md): Generate an ed25519 signing keypair
- [kosa8 policy show](https://docs.kosa8.com/reference/policy-show.md): Show the active policy
- [kosa8 policy sign](https://docs.kosa8.com/reference/policy-sign.md): Sign a profile with an ed25519 private key
- [kosa8 policy trust](https://docs.kosa8.com/reference/policy-trust.md): Trust a public key as the policy signer
- [kosa8 port](https://docs.kosa8.com/reference/port.md): Show published ports for a container
- [kosa8 prompt](https://docs.kosa8.com/reference/prompt.md): Give a coding agent one task, run in a sandbox that is removed when it finishes
- [kosa8 ps](https://docs.kosa8.com/reference/ps.md): List containers
- [kosa8 pull](https://docs.kosa8.com/reference/pull.md): Pull an image into the kosa8 engine
- [kosa8 push](https://docs.kosa8.com/reference/push.md): Push an image to a registry
- [kosa8 range](https://docs.kosa8.com/reference/range.md): Run a cyber range: a live copy of one prepared scenario per trainee
- [kosa8 range check](https://docs.kosa8.com/reference/range-check.md): Run the objective checks and record the scores in the audit log
- [kosa8 range down](https://docs.kosa8.com/reference/range-down.md): Record every trainee's final result, then remove the range
- [kosa8 range reset](https://docs.kosa8.com/reference/range-reset.md): Put one trainee's machine back to the prepared scenario
- [kosa8 range status](https://docs.kosa8.com/reference/range-status.md): Show each trainee's objectives, score and time
- [kosa8 range up](https://docs.kosa8.com/reference/range-up.md): Prepare a scenario once and give every trainee a live clone of it
- [kosa8 range validate](https://docs.kosa8.com/reference/range-validate.md): Check a scenario file and say what a range of it would cost
- [kosa8 remote](https://docs.kosa8.com/reference/remote.md): Manage remote (Cloudflare R2) snapshot storage
- [kosa8 remote ls](https://docs.kosa8.com/reference/remote-ls.md): List snapshots stored remotely
- [kosa8 rename](https://docs.kosa8.com/reference/rename.md): Rename a container
- [kosa8 restart](https://docs.kosa8.com/reference/restart.md): Restart a container
- [kosa8 rewind](https://docs.kosa8.com/reference/rewind.md): Put a sandbox back to a saved restore point
- [kosa8 rm](https://docs.kosa8.com/reference/rm.md): Remove a container
- [kosa8 rmi](https://docs.kosa8.com/reference/rmi.md): Remove an image from the engine
- [kosa8 run](https://docs.kosa8.com/reference/run.md): Run a container in the kosa8 engine VM (auto-pulls on first use)
- [kosa8 sandbox](https://docs.kosa8.com/reference/sandbox.md): Manage isolated microVM sandboxes
- [kosa8 sandbox create](https://docs.kosa8.com/reference/sandbox-create.md): Boot a new sandbox microVM
- [kosa8 sandbox down](https://docs.kosa8.com/reference/sandbox-down.md): Stop a sandbox, keeping its disk (start it again with `sandbox up`)
- [kosa8 sandbox egress](https://docs.kosa8.com/reference/sandbox-egress.md): Show the egress policy the host enforces for a sandbox, and what it has refused
- [kosa8 sandbox exec](https://docs.kosa8.com/reference/sandbox-exec.md): Run a command in a container inside a sandbox
- [kosa8 sandbox images](https://docs.kosa8.com/reference/sandbox-images.md): List images in a sandbox
- [kosa8 sandbox lifecycle](https://docs.kosa8.com/reference/sandbox-lifecycle.md): Set when a sandbox stops or is deleted by itself
- [kosa8 sandbox ls](https://docs.kosa8.com/reference/sandbox-ls.md): List sandboxes
- [kosa8 sandbox pause](https://docs.kosa8.com/reference/sandbox-pause.md): Freeze a sandbox where it is (resume it with `sandbox resume`)
- [kosa8 sandbox pcap](https://docs.kosa8.com/reference/sandbox-pcap.md): Capture a running sandbox's network traffic to a pcapng file
- [kosa8 sandbox preview](https://docs.kosa8.com/reference/sandbox-preview.md): Make a signed, expiring link to a web server in a sandbox
- [kosa8 sandbox ps](https://docs.kosa8.com/reference/sandbox-ps.md): List containers running inside a sandbox
- [kosa8 sandbox pull](https://docs.kosa8.com/reference/sandbox-pull.md): Pull an image into a sandbox's private engine
- [kosa8 sandbox resume](https://docs.kosa8.com/reference/sandbox-resume.md): Continue a paused sandbox
- [kosa8 sandbox rm](https://docs.kosa8.com/reference/sandbox-rm.md): Stop and delete a sandbox
- [kosa8 sandbox run](https://docs.kosa8.com/reference/sandbox-run.md): Run a container inside a sandbox's private engine
- [kosa8 sandbox start](https://docs.kosa8.com/reference/sandbox-start.md): Start a detached container inside a sandbox
- [kosa8 sandbox up](https://docs.kosa8.com/reference/sandbox-up.md): Start a stopped sandbox from its own disk
- [kosa8 save](https://docs.kosa8.com/reference/save.md): Save an image to an OCI archive
- [kosa8 search](https://docs.kosa8.com/reference/search.md): Search Docker Hub for images
- [kosa8 signup](https://docs.kosa8.com/reference/signup.md): Give your email to start using kosa8 on the free tier
- [kosa8 skill](https://docs.kosa8.com/reference/skill.md): Teach an AI coding agent when and how to use kosa8 sandboxes
- [kosa8 skill install](https://docs.kosa8.com/reference/skill-install.md): Install the skill for claude-code, codex or cursor (default: claude-code and codex)
- [kosa8 skill show](https://docs.kosa8.com/reference/skill-show.md): Print the skill
- [kosa8 snapshot](https://docs.kosa8.com/reference/snapshot.md): Snapshot and restore sandbox state
- [kosa8 snapshot create](https://docs.kosa8.com/reference/snapshot-create.md): Capture full VM state (memory + processes) of a running sandbox
- [kosa8 snapshot encrypt](https://docs.kosa8.com/reference/snapshot-encrypt.md): Encrypt a snapshot at rest and wipe its plaintext
- [kosa8 snapshot export](https://docs.kosa8.com/reference/snapshot-export.md): Write a snapshot to an encrypted bundle for removable media or one-way transfer
- [kosa8 snapshot import](https://docs.kosa8.com/reference/snapshot-import.md): Import an encrypted snapshot bundle written by `snapshot export`
- [kosa8 snapshot ls](https://docs.kosa8.com/reference/snapshot-ls.md): List snapshots
- [kosa8 snapshot pull](https://docs.kosa8.com/reference/snapshot-pull.md): Download a snapshot from remote storage, ready to restore
- [kosa8 snapshot push](https://docs.kosa8.com/reference/snapshot-push.md): Upload a snapshot to remote storage (Cloudflare R2)
- [kosa8 snapshot restore](https://docs.kosa8.com/reference/snapshot-restore.md): Boot a sandbox from a snapshot, resuming processes in place
- [kosa8 snapshot rm](https://docs.kosa8.com/reference/snapshot-rm.md): Delete a snapshot (state file, disk clone, and manifest)
- [kosa8 snapshot seal](https://docs.kosa8.com/reference/snapshot-seal.md): Sign a tamper-evident record of exactly what a snapshot contains
- [kosa8 snapshot verify](https://docs.kosa8.com/reference/snapshot-verify.md): Check a sealed snapshot against its seal and name any file that changed
- [kosa8 start](https://docs.kosa8.com/reference/start.md): Start a created container
- [kosa8 stats](https://docs.kosa8.com/reference/stats.md): Show resource usage of a running container
- [kosa8 stop](https://docs.kosa8.com/reference/stop.md): Stop a running container (SIGTERM, then SIGKILL)
- [kosa8 system](https://docs.kosa8.com/reference/system.md): Manage kosa8 itself
- [kosa8 system info](https://docs.kosa8.com/reference/system-info.md): Show engine and system information
- [kosa8 system prune](https://docs.kosa8.com/reference/system-prune.md): Remove stopped containers
- [kosa8 tag](https://docs.kosa8.com/reference/tag.md): Give an existing image another name
- [kosa8 template](https://docs.kosa8.com/reference/template.md): Build what new sandboxes start with, from a Dockerfile
- [kosa8 template build](https://docs.kosa8.com/reference/template-build.md): Build a template from a Dockerfile
- [kosa8 template ls](https://docs.kosa8.com/reference/template-ls.md): List templates
- [kosa8 template rm](https://docs.kosa8.com/reference/template-rm.md): Delete a template (sandboxes made from it keep their copy)
- [kosa8 top](https://docs.kosa8.com/reference/top.md): List processes running inside a container
- [kosa8 unpause](https://docs.kosa8.com/reference/unpause.md): Resume a paused container
- [kosa8 up](https://docs.kosa8.com/reference/up.md): Detect, build and run a project — no Dockerfile required
- [kosa8 update](https://docs.kosa8.com/reference/update.md): Update a running container's resource limits
- [kosa8 upgrade](https://docs.kosa8.com/reference/upgrade.md): Buy a plan: opens its checkout in your browser
- [kosa8 usage](https://docs.kosa8.com/reference/usage.md): Show metered usage, derived from the audit log
- [kosa8 validate](https://docs.kosa8.com/reference/validate.md): Generate, sign and verify GxP qualification records (IQ, OQ)
- [kosa8 validate iq](https://docs.kosa8.com/reference/validate-iq.md): Generate an Installation Qualification record
- [kosa8 validate oq](https://docs.kosa8.com/reference/validate-oq.md): Run an Operational Qualification protocol in a clone of a validated snapshot
- [kosa8 validate sign](https://docs.kosa8.com/reference/validate-sign.md): Sign a qualification record with your identity (21 CFR 11.50, 11.70)
- [kosa8 validate verify](https://docs.kosa8.com/reference/validate-verify.md): Check a qualification record and its signatures using nothing but the files
- [kosa8 version](https://docs.kosa8.com/reference/version.md): Show kosa8 client and daemon version
- [kosa8 volume](https://docs.kosa8.com/reference/volume.md): Manage named volumes
- [kosa8 volume create](https://docs.kosa8.com/reference/volume-create.md): Create a named volume
- [kosa8 volume ls](https://docs.kosa8.com/reference/volume-ls.md): List volumes
- [kosa8 volume rm](https://docs.kosa8.com/reference/volume-rm.md): Remove a volume
- [kosa8 wait](https://docs.kosa8.com/reference/wait.md): Block until a container stops, then print its exit code
- [kosa8 whoami](https://docs.kosa8.com/reference/whoami.md): Show the kosa8 account, organization and key this machine is signed in with
- [kosa8 worker](https://docs.kosa8.com/reference/worker.md): Connect this machine to a kosa8 worker, or let others connect to this one
- [kosa8 worker forget](https://docs.kosa8.com/reference/worker-forget.md): Remove the saved worker connection
- [kosa8 worker join](https://docs.kosa8.com/reference/worker-join.md): Save a worker connection from a pairing code
- [kosa8 worker pair](https://docs.kosa8.com/reference/worker-pair.md): Print a pairing code another device can join this worker with
- [kosa8 worker status](https://docs.kosa8.com/reference/worker-status.md): Show which worker commands go to, and whether it answers
- [kosa8 wsl](https://docs.kosa8.com/reference/wsl.md): Run sandboxes on this Windows PC, through WSL2
- [kosa8 wsl setup](https://docs.kosa8.com/reference/wsl-setup.md): Set up kosa8's engine in WSL2 and connect this CLI to it
- [kosa8 wsl status](https://docs.kosa8.com/reference/wsl-status.md): Show the WSL2 daemon this CLI drives