# Oblien Documentation

> Oblien provides isolated, secure virtual machines for AI agents - boot in milliseconds, full root access, real networking, encrypted storage.
> For the full content of any page below, fetch /llms.mdx/docs/<path>.

## overview

- [Architecture](/llms.mdx/docs/architecture): How Oblien isolates workspaces using Firecracker microVMs and Docker images - hardware-level security with container-level developer experience.
- [Overview](/llms.mdx/docs): Cloud workspaces for AI agents, services, and development. Hardware-isolated microVMs that boot in milliseconds - drive them from the API, MCP, or the dashboard.
- [Security & Privacy](/llms.mdx/docs/security): Two-layer security (network firewall + token auth), hardware isolation, and zero-access architecture - built for agents running untrusted code.
- [Use Cases](/llms.mdx/docs/use-cases): Architecture patterns for workspaces - AI agents, service hosting, remote development, SaaS sandboxes, and parallel compute.
- [Workspace Networking](/llms.mdx/docs/workspace-networking): How workspaces communicate with each other, how the network is protected, and when to use workspace-to-workspace calls

## workspace

- [Authentication](/llms.mdx/docs/workspace/authentication): API keys, tokens, and authentication methods
- [Dashboard](/llms.mdx/docs/workspace/dashboard): Managing workspaces through the Oblien dashboard
- [Domains](/llms.mdx/docs/workspace/domains): Custom domains, free preview URLs, and branded subdomains
- [Errors](/llms.mdx/docs/workspace/errors): Error codes and troubleshooting guide
- [Introduction](/llms.mdx/docs/workspace): Cloud workspaces for AI agents, services, and development. Hardware-isolated microVMs you can create, control, and destroy through code.
- [Quickstart](/llms.mdx/docs/workspace/quickstart): Create your first workspace in 5 minutes
- [SDK Setup](/llms.mdx/docs/workspace/sdk-setup): Install and configure the Oblien Workspace SDK

## api

- [Analytics](/llms.mdx/docs/api/analytics): Traffic analytics, bandwidth metrics, geo breakdown, request logs, and live streaming for your domains
- [Domains](/llms.mdx/docs/api/domains): Custom domain and SSL management API
- [Edge Proxy](/llms.mdx/docs/api/edge-proxy): Enterprise reverse proxy — route subdomains to external upstreams
- [Edge Tunnel](/llms.mdx/docs/api/edge-tunnel): Expose local ports to the internet through the Oblien edge
- [Images](/llms.mdx/docs/api/images): Browse the available workspace image catalog
- [Overview](/llms.mdx/docs/api): Complete API reference for Oblien Workspace
- [Lifecycle & Power](/llms.mdx/docs/api/lifecycle): Start, stop, restart workspaces and manage lifecycle modes
- [Logs](/llms.mdx/docs/api/logs): Workspace log management and streaming
- [Metadata](/llms.mdx/docs/api/metadata): Custom key-value metadata on workspaces
- [Metrics & Stats](/llms.mdx/docs/api/metrics): Live stats, SSE streaming, and VM runtime info
- [Namespaces](/llms.mdx/docs/api/namespaces): Organize workspaces, enforce resource limits, control quotas, and manage overdraft policies
- [Network](/llms.mdx/docs/api/network): Firewall rules, ingress/egress, private links, and outbound IP management
- [Pages](/llms.mdx/docs/api/pages): Deploy and manage static pages served from the edge with optional custom domains
- [Public Access](/llms.mdx/docs/api/public-access): Expose workspace ports to the internet with preview URLs
- [Resources](/llms.mdx/docs/api/resources): Get and update workspace CPU, memory, and disk
- [Runtime API Access](/llms.mdx/docs/api/runtime-api-access): Enable the workspace internal server, manage tokens, and control access
- [Scoped Tokens](/llms.mdx/docs/api/scoped-tokens): Issue short-lived JWTs scoped to a namespace or workspace for multi-tenant SaaS
- [Snapshots & Archives](/llms.mdx/docs/api/snapshots): Save and restore workspace state
- [SSH](/llms.mdx/docs/api/ssh): Enable SSH access, manage passwords and authorized keys
- [Usage & Activity](/llms.mdx/docs/api/usage): Usage history, credits chart, and resource tracking
- [Workloads](/llms.mdx/docs/api/workloads): Managed background processes with lifecycle control
- [Workspaces](/llms.mdx/docs/api/workspaces): Create, list, get, update, and delete workspaces

## concepts

- [Billing & Credits](/llms.mdx/docs/concepts/billing): How workspace usage is metered and billed
- [Edge Proxy](/llms.mdx/docs/concepts/edge-proxy): Route subdomains through the edge to external upstreams — enterprise only
- [Images](/llms.mdx/docs/concepts/images): Understanding workspace images and choosing the right base
- [Modes](/llms.mdx/docs/concepts/modes): Permanent vs temporary workspaces, TTL, and restart policies
- [Networking](/llms.mdx/docs/concepts/networking): How workspace networking, firewalls, and public access work
- [Pages](/llms.mdx/docs/concepts/pages): Deploy static files from workspaces to the edge — no running VM required
- [Resource Pools](/llms.mdx/docs/concepts/resource-pools): How CPU, memory, and disk quotas work across your workspaces
- [Webhooks](/llms.mdx/docs/concepts/webhooks): Receive real-time HTTP callbacks when events happen in your workspaces

## runtime-api

- [Command Execution](/llms.mdx/docs/runtime-api/exec): Run commands and manage background tasks inside the workspace
- [Files](/llms.mdx/docs/runtime-api/files): List, read, write, create, and delete files and directories inside the workspace
- [Overview](/llms.mdx/docs/runtime-api): Direct API access to the workspace runtime - file operations, search, terminal, and command execution
- [Search](/llms.mdx/docs/runtime-api/search): Content search with ripgrep and filename search inside the workspace
- [Connection & Auth](/llms.mdx/docs/runtime-api/server-setup): Enable the workspace internal server, understand the two connection methods, and configure access
- [Terminal](/llms.mdx/docs/runtime-api/terminal): Create and manage interactive terminal sessions inside the workspace
- [File Watcher](/llms.mdx/docs/runtime-api/watcher): Watch for file system changes in real time over WebSocket