Skip to main content
Container capabilities are declared in the API but have no backend today, so every call raises NotImplementedError.
No provider is wired to container management. container_create, container_file_read, container_file_write, container_file_list, and their async a-prefixed variants all raise NotImplementedError. Do not build on these until a backend lands.

Quick Start

1

What happens when you call it

Every container function raises immediately — no container is created.
2

Run code in a container instead

To actually run code in an isolated container today, use Docker with an agent.
See Run on Docker for the supported path.

How It Works

The CLI and MCP adapters wrap these calls and surface an honest error: the CLI exits non-zero, and MCP returns an error instead of a fake container ID.

Configuration Options

No options apply while there is no backend. The signature is retained for a future provider.

Capabilities SDK Reference

Auto-generated reference for the capabilities module

Common Patterns

Isolated execution is available through supported paths instead:
  • Docker sandbox — run agent tasks inside a container with Run on Docker.
  • Sandboxed tools — restrict tool execution with the sandbox configuration.

Best Practices

There is no backend. Calls raise NotImplementedError — treat this capability as unavailable until a provider is wired.
If your code checks for container support at runtime, catch NotImplementedError and fall back to a supported path rather than assuming success.
For genuine isolated execution today, use the Docker path with an Agent. It is supported and tested.

Run on Docker

Run agents inside a Docker container today

Capabilities Overview

All LiteLLM parity capabilities