For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Proxy-Managed Credential Custody for the Docker Sandbox Kit — Agents can now run inside a Docker Sandbox without the real Band or LLM keys ever entering the sandbox VM: the VM carries only the proxy-managed sentinel while a trusted host-side proxy supplies the real credential on the outbound request. Two custody tiers are documented — credential injection (preferred) and a workspace env-file fallback that warns at launch — and the bundled echo-agent workspace now defaults to proxy-managed. Passing a real Band API key while in proxy-managed mode is rejected rather than quietly accepted.
Changed
Python SDK:
WebSocket API Key Sent as a Handshake Header — The SDK now sends its Band API key as an x-api-key handshake header, which the platform honors ahead of the connection URL’s query parameter. This keeps the key out of URL-based logs and is what allows a host-side proxy to supply the credential on the agent’s behalf.
