# Personal agents template with an SDK key: PASS

Run date: 2026-10-12 (UTC). Gateway: `sbx.agent-next.com`. Client: E2B Python SDK 2.55.1 in a fresh virtual environment, template `agent-full`, OpenClaw 2026.10.2 from its official installer. No model key was used: this covers create, install, gateway, public URL and pause/resume, as the page says. The key was read in-process and never printed.
Setup text: the live [For agents page](https://sbx.agent-next.com/docs/agents/#client-personal-agents) and steps 1 to 5 of the [personal agents page](https://sbx.agent-next.com/docs/personal-agents/).

## Flow

| step | result |
| --- | --- |
| create with `Sandbox.create(template="agent-full", timeout=3600, lifecycle=...)` | PASS |
| install OpenClaw (`install.sh --no-onboard --no-prompt`) | PASS in about 50 s. The sandbox user is `user`, not root, and Node 24 is already installed. Open a new shell after the installer to get `openclaw` on the PATH |
| start the gateway (`openclaw gateway --port 18789 --bind lan --allow-unconfigured`) with the token and log under `$HOME` | PASS: `[gateway] ready`. The page's `/root/gw.env` fails for the sandbox user (permission denied); the page now uses `$HOME` |
| `/health` with the token from outside | PASS: HTTP 200 (204 on OpenClaw 2026.9.7). Without the token `/` returns 403 |
| `sbx.pause()`, then `Sandbox.connect(id)` | PASS: pause 1.8 s, resume 0.3 s, same gateway process, files intact, `/health` 200 again |
| kill twice | PASS: `killed: true`, then `already_gone: true`; the health URL then returned 502 |

## Residue (zero)

The key's sandbox list was 0 at the end. Everything lived in the sandbox.