Daytona
for LuumenAI
Read sandbox state and logs, then change workspaces as approved steps
Connect Daytona and Luumen can answer questions about your development sandboxes without you opening a browser. Pull entrypoint logs, check desktop process status, read files, and review commit history. When something needs to change — archiving a sandbox, cloning a repo, rotating an API key — Luumen shows the plan first and, by default, waits for your approval.
The Daytona toolbox
114 tools: 56 read, 58 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadDownload File (Deprecated)[DEPRECATED] Downloads a file from a sandbox's toolbox filesystem.
- ReadDownload Multiple FilesDownloads multiple files from a sandbox as a multipart/form-data bundle.
- ReadFind In Files (Deprecated)[DEPRECATED] Searches for text or patterns in files within a sandbox.
- ReadGet API KeyRetrieves an API key by its name.
- ReadGet Available Account ProvidersRetrieves all available account providers that can be used to authenticate and link accounts.
- ReadGet Build Logs URLRetrieves the build logs URL for a specific sandbox by its ID or name.
- ReadGet Commit HistoryGets commit history from a repository in a sandbox toolbox.
- ReadGet Computer Use StatusRetrieves the status of all VNC desktop processes in a sandbox.
- ReadGet Daytona ConfigRetrieves the Daytona platform configuration including URLs, OIDC settings, analytics, rate limits, and other platform-level settings.
- ReadGet Display InfoRetrieves information about displays connected to a sandbox.
- ReadGet Entrypoint LogsRetrieves entrypoint logs for a sandbox session.
- ReadGet File Info (Deprecated)[DEPRECATED] Gets file info inside a sandbox toolbox.
- ReadGet Git History (Deprecated)[DEPRECATED] Get commit history from a git repository in a sandbox toolbox.
- ReadCheck Sandbox AccessChecks if the authenticated user has access to a specific sandbox.
- ReadGet Daytona Health StatusRetrieves the current health status of the Daytona service.
- ReadGet OrganizationRetrieves detailed information about an organization by its unique identifier.
- ReadGet Organization Audit LogsRetrieves audit logs for an organization.
- ReadGet Organization Invitations CountRetrieves the count of organization invitations for the authenticated user.
- ReadGet Organization Usage OverviewRetrieves the current usage overview for an organization, including CPU, memory, disk, snapshot, and volume usage metrics across all regions.
- ReadGet Process StatusRetrieves the status of a specific VNC process in a sandbox.
- ReadGet Project Dir (Deprecated)[DEPRECATED] Gets the project directory path within a sandbox toolbox.
- ReadGet PTY SessionRetrieves information about a PTY (pseudo-terminal) session in a sandbox.
- ReadGet Push AccessRetrieves temporary storage access credentials for pushing objects to object storage.
- ReadGet Docker RegistryRetrieves details of a specific Docker registry by its unique identifier.
- ReadGet SandboxRetrieves details of a specific sandbox by its ID or name.
- ReadGet Session Command LogsRetrieves logs for a specific command executed within a session.
- ReadGet Session (Deprecated)[DEPRECATED] Retrieves details of a specific session in a sandbox toolbox.
- ReadGet SnapshotRetrieves details of a specific snapshot by its ID or name.
- ReadGet Snapshot Build LogsRetrieves build logs for a specific snapshot.
- ReadGet Toolbox Proxy URLRetrieves the toolbox proxy URL for a sandbox by its ID or name.
- ReadGet Transient Push AccessRetrieves temporary registry access credentials for pushing snapshots.
- ReadGet Authenticated UserRetrieves the profile of the authenticated user.
- ReadGet User Home Dir (Deprecated)[DEPRECATED] Gets the user home directory path for a sandbox.
- ReadGet VolumeRetrieves details of a specific volume by its ID.
- ReadGet WindowsRetrieves information about all windows in a sandbox.
- ReadGet Working DirectoryGets the current working directory inside a sandbox toolbox.
- ReadGet Work Dir (Deprecated)[DEPRECATED] Retrieves the working directory path of a sandbox toolbox.
- ReadList API KeysLists all API keys for the organization.
- ReadList Available RegionsLists all available regions for the organization.
- ReadList Files (Deprecated)[DEPRECATED] Lists files and directories in a sandbox toolbox.
- ReadList Git Branches (Deprecated)[DEPRECATED] Lists all git branches from a repository in a sandbox toolbox.
- ReadList Organization InvitationsLists all pending organization invitations.
- ReadList Organization Invitations for UserLists all organization invitations for the authenticated user.
- ReadList organization membersLists all members of a specific organization.
- ReadList organization rolesLists all roles available in an organization.
- ReadList OrganizationsLists all organizations that the authenticated user has access to.
- ReadList Process SessionsLists all active process sessions in a sandbox.
- ReadList PTY SessionsLists all active PTY sessions in a sandbox.
- ReadList registriesLists all docker registries available in the organization.
- ReadList SandboxesLists all sandboxes for the organization.
- ReadList Sandboxes PaginatedLists all sandboxes with pagination support.
- ReadList shared regionsList all shared regions.
- ReadList SnapshotsLists all snapshots for the organization.
- ReadList VolumesLists all volumes in the organization.
- ReadSearch Files[DEPRECATED] Search for files inside a sandbox toolbox.
- ReadTake Compressed ScreenshotTakes a compressed screenshot of the entire screen in a sandbox.
- WriteArchive SandboxArchives a sandbox in the Daytona platform. Approval by default
- WriteCancel Organization InvitationCancels a pending organization invitation. Approval by default
- WriteCheckout Git Branch[DEPRECATED] Checkout a branch or commit in a git repository within a sandbox. Approval by default
- WriteClone RepositoryClones a Git repository into a sandbox toolbox. Approval by default
- WriteCreate API KeyCreates a new API key for the organization. Approval by default
- WriteCreate Sandbox BackupInitiates a backup operation for an existing sandbox environment. Approval by default
- WriteCreate Folder in SandboxCreates a new folder inside a sandbox's filesystem. Approval by default
- WriteCreate OrganizationCreates a new organization in Daytona. Approval by default
- WriteCreate Organization InvitationCreates an invitation to join an organization with specified roles and permissions. Approval by default
- WriteCreate Organization RoleCreates a new organization role with specified permissions. Approval by default
- WriteCreate Process SessionCreates a new session in the sandbox for process management. Approval by default
- WriteCreate PTY SessionCreates a new PTY (pseudo-terminal) session in a sandbox. Approval by default
- WriteCreate Docker RegistryCreates a new Docker registry for the organization. Approval by default
- WriteCreate SandboxCreates a new sandbox environment for development or testing purposes. Approval by default
- WriteCreate SnapshotCreates a new snapshot resource that can be used as a base image for sandboxes. Approval by default
- WriteCreate SSH AccessCreates SSH access credentials for a sandbox environment. Approval by default
- WriteCreate VolumeCreates a new volume for storing data that can be attached to sandboxes. Approval by default
- WriteDeactivate SnapshotDeactivates a snapshot in the Daytona platform. Approval by default
- WriteDelete API KeyDeletes an API key by its name. Approval by default
- WriteDelete API Key for UserDeletes an API key for a specific user. Approval by default
- WriteDelete Sandbox FileDeletes a file inside a sandbox by its path. Approval by default
- WriteDelete Git BranchDeletes a branch from a git repository inside a sandbox by its name. Approval by default
- WriteDelete OrganizationDeletes an organization. Approval by default
- WriteDelete Organization OTEL ConfigDeletes the OpenTelemetry (OTEL) configuration for an organization. Approval by default
- WriteDelete Organization RoleDeletes an organization role. Approval by default
- WriteDelete PTY SessionDeletes a PTY session and terminates the associated process. Approval by default
- WriteDelete RecordingDeletes a recording from the Daytona platform by its ID. Approval by default
- WriteDelete Docker RegistryDeletes a Docker registry from the Daytona platform. Approval by default
- WriteDelete SandboxDeletes a sandbox from the Daytona platform by its ID or name. Approval by default
- WriteDelete SessionDeletes a session from the Daytona platform by its ID. Approval by default
- WriteDelete SnapshotDeletes a snapshot from the Daytona platform by its ID. Approval by default
- WriteDelete VolumeDeletes a volume from the Daytona platform by its ID. Approval by default
- WriteEnroll in SMS MFAEnrolls the authenticated user in SMS-based multi-factor authentication. Approval by default
- WriteExecute CommandExecutes a shell command within a running sandbox via the toolbox proxy. Approval by default
- WriteExpire Signed Port Preview URLExpires a signed preview URL for a sandbox port. Approval by default
- WriteFocus Accessibility NodeFocuses an accessibility node in a sandbox's computer use system. Approval by default
- WriteReplace In FilesReplaces text or patterns in multiple files within a sandbox. Approval by default
- WriteReplace Sandbox LabelsReplaces all labels on a sandbox with a new set of key-value pairs. Approval by default
- WriteResize PTY SessionResizes an active PTY session with new terminal dimensions. Approval by default
- WriteRevoke SSH AccessRevokes SSH access credentials for a sandbox environment. Approval by default
- WriteSet Sandbox Auto Archive IntervalSets the auto-archive interval for a sandbox. Approval by default
- WriteSet Auto Delete IntervalSets the auto-delete interval for a sandbox. Approval by default
- WriteSet Autostop IntervalSets the auto-stop interval for a sandbox in the Daytona platform. Approval by default
- WriteStart Computer UseStarts all VNC desktop processes (Xvfb, xfce4, x11vnc, novnc) for a sandbox. Approval by default
- WriteStart LSP ServerStarts an LSP server process inside a sandbox project. Approval by default
- WriteStart VNC ProcessRestarts a specific VNC process within a sandbox in the Daytona platform. Approval by default
- WriteStart SandboxStarts a sandbox in the Daytona platform. Approval by default
- WriteStop LSP ServerStops an LSP server process inside a sandbox project. Approval by default
- WriteStop SandboxStops a running sandbox in the Daytona platform. Approval by default
- WriteUnlink AccountUnlinks a connected provider account (such as GitHub, GitLab, or Bitbucket) from the authenticated user's Daytona profile. Approval by default
- WriteUpdate Experimental ConfigUpdates experimental configuration for an organization on the Daytona platform. Approval by default
- WriteUpdate Last ActivityUpdates the last activity timestamp for a sandbox in the Daytona platform. Approval by default
- WriteUpdate Organization InvitationUpdates an organization invitation with new role and permissions. Approval by default
- WriteUpdate Organization OpenTelemetry ConfigUpdates the OpenTelemetry configuration for an organization. Approval by default
- WriteUpdate Organization RoleUpdates an organization role with a new name, description, and permissions. Approval by default
- WriteUpdate Public StatusUpdates the public visibility status of a sandbox in the Daytona platform. Approval by default
- WriteUpdate Docker RegistryUpdates a Docker registry configuration. Approval by default
- WriteUpdate Sandbox Default Limited Network EgressUpdates the sandbox default limited network egress setting for an organization. Approval by default
One prompt, start to finish
What a governed Daytona run looks like inside Luumen.
Questions
How does LuumenAI connect to Daytona?
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Can LuumenAI change things in Daytona on its own?
Read actions answer immediately. Anything that writes — archive sandbox, cancel organization invitation, checkout git branch, clone repository, and more — is shown as a plan and requires approval by default, including the 19 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
Who gets access to the integration?
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Is there an audit trail?
Every call to Daytona — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
GitHubRepos, actions, and runbook code as context and as actions.
GitLabMerge requests and pipelines proposed, triggered, and rolled back.
BitbucketRead commits, diffs, and branches in Bitbucket, then open the fix as a held write.
Azure DevOpsAzure DevOps repos and pipelines as context — and as approved actions.Put Daytona to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.