Skip to navigation
Developer tools

Lattice Sandboxes

Setting up an environment in Lattice Sandboxes

Lattice Sandboxes is a secure, isolated platform for creating environments with simulated data to develop and test your Lattice SDK app. Apps developed on Sandboxes are portable and can be used in other Lattice deployments based on your environment requirements.

Pricing

Lattice Sandboxes environments are provided free of charge. You can make an unlimited number of free API calls to your environment to create, stream, and task entities in Lattice.

Before you begin

Sign in

Anduril uses Okta to authenticate access to Lattice Sandboxes. Multi-factor authentication (MFA) is satisfied with a passkey, such as a browser passkey, operating system biometrics, or a physical FIDO/UBI security key.

Browser support

Use Chrome or a Chromium-based browser, such as Microsoft Edge or Brave, to access the Lattice Sandboxes developer portal. Firefox is not supported and will prevent you from completing the sign-in procedure.

If this is your first time signing in, activate your Okta account and register a passkey:

1Open the welcome email and choose the Activate Okta Account link. The link expires seven days after the email is sent.
2On the Set up security methods page, next to Password, choose Set up, then choose and confirm a password.
3

Next to Security Key or Biometric Authenticator, choose Set up, then register one of the following passkey options:

  • Browser passkey: Stored by your browser’s password manager so that you can sign in from any device signed in to the same browser profile.
  • Operating system biometrics: Uses Touch ID, Face ID, Windows Hello, or another built-in platform authenticator bound to the current device.
  • Physical FIDO or UBI key: Uses a hardware token such as a YubiKey, which you can carry with you between devices.

To sign in after activation, do the following:

2For Username, enter the email address that you used to request access to the Lattice Developer program.
3For Password, enter the password you created during activation.
4Complete the passkey challenge using the authenticator method you registered. On success, Okta redirects you to the Lattice Sandboxes dashboard.

To manage your passkeys and password, visit https://login.developer.anduril.com/account-settings/home. If you lose access to your passkey, reach out to lattice-developers@anduril.com for assistance.

After logging in, the dashboard displays all existing environments associated with your account and the status of each environment.

Create an environment

To create a new environment, open the Environment Catalog, then do the following:

1

Choose New Environment.

Shows an empty list of environments
2

On the Environment Catalog page, choose Lattice and click Create. You’ll be redirected to the environment creation details page, where you see the status of your environment:

Shows the environment details page
3

Once the state changes to Ready, review the following details:

Resource Endpoint

Use this to launch the Lattice UI or connect to Lattice programmatically.

Lattice Client ID

Use the client ID to authorize your integration with the Lattice SDK.

Lattice Client Secret

Use the client secret to authenticate your integration with the Lattice SDK.

Lattice User

The user name you use to log in to the Lattice UI.

Lattice Password

The password you use to log in to the Lattice UI.

Lattice Auth Token

This is your environment token. Save this token in addition to the Sandboxes token, to authenticate your requests with the Lattice API.

4

Confirm you have access to your environment by clicking the Lattice URL link, then log in using the provided user name and password.

Restrictions
  • Create up to 2 concurrent environments in Sandboxes.
  • Environments have a maximum lifetime of 12 hours.
  • Environments have a maximum idle lifetime of 2 hours. You must make a network call, or sign in to the Lattice UI to keep your environment active.
  • Access tokens obtained using client credentials have a lifetime of 30 minutes.

Set up credentials

To query your Sandboxes environment, you will need:

  • Sandboxes token (anduril-sandbox-authorization header) — This is your account-level authorization token, because the Sandboxes Proxy uses it to verify your account before forwarding requests to your environment. Create this token once, then use it to access all of your environments.
  • Environment token (authorization header) — This is the long-lived, static bearer token your integration uses to authenticate with the environment, because it lets you call Lattice directly without a token exchange. Your environment token is the Lattice Auth Token shown on the environment details page after creating a new environment.

If you use OAuth 2.0 client credentials instead of an environment token, you also need your Lattice Client ID and Lattice Client Secret, because your integration exchanges them for a short-lived access token. Both are automatically generated when creating a new environment.

Your Sandboxes token and an environment credential — an environment token, or a Client ID and Secret — are required at runtime to interact with Lattice Sandboxes. The Sandboxes Proxy verifies your Sandboxes token, then forwards the request to your environment.

Diagram showing the authorization flow for Lattice Sandboxes.

To create a new Sandboxes token, do the following:

1Open the Account & Security page in Sandboxes portal, not the Lattice environment. This token can be used for all environments for the life of the token.
2

In the Bearer tokens section, click + New Token:

Shows the Account & Security page where you can create, and manage, your authorization tokens.
3

On the Create Bearer Token modal, enter the following:

  • Bearer token name — Enter a descriptive name for your Sandboxes token.
  • Bearer token expiration — Select an expiration time frame.
4

Click Create to generate a Sandboxes token, then save your Sandboxes token.

After this step, the Sandboxes token will not be visible again.

To authenticate API requests to your Sandboxes environment, choose an authentication method:

Use the Lattice Auth Token from your environment details page as a long-lived, static bearer token. Export it as an environment variable:

export ENVIRONMENT_TOKEN="<YOUR_LATTICE_AUTH_TOKEN>"

Pass the token in the Authorization header to interact with Lattice:

curl -X GET https://$LATTICE_ENDPOINT/api/v1/objects \
     -H "Authorization: Bearer $ENVIRONMENT_TOKEN" \
     -H "Anduril-Sandbox-Authorization: Bearer $SANDBOXES_TOKEN"
Token rotation

The environment token is long-lived but eventually expires. Rotate the token before it expires to avoid interrupting your integration.

What’s next?

  • Test your new environment by running the Quickstart guide.
  • Install the Lattice SDK for a protocol and language of your choice to get started developing with Lattice.