Configure sandbox providers - Valkyrie

Valkyrie resolves sandbox-provider credentials from AWS Secrets Manager. Register each secret under a provider name in the CLI configuration. Full syntax is in the config provider set and config provider default reference.

Daytona

Create a Daytona API key with read, write, and delete access to sandboxes and snapshots.
Choose a target from Daytona’s shared regions.
Store the following JSON as an AWS Secrets Manager secret:

{
  "DAYTONA_API_KEY": "...",
  "DAYTONA_API_URL": "https://app.daytona.io/api",
  "DAYTONA_TARGET": "..."
}

Register the secret:

valkyrie config provider set daytona DaytonaSecrets

The first configured provider becomes the default. Set the default explicitly with:

valkyrie config provider default daytona

Select a configured provider for one run:

valkyrie run start --agent sweagent --benchmark swebench --provider daytona

Provider secret schemas are provider-specific. Registering a name does not make one provider’s secret shape valid for another provider. The legacy DAYTONA_SECRET_NAME configuration key remains supported only when sandbox_providers is not configured.