Run agent-owned Docker workloads on managed cloud compute. Three types: service (long-running, optional public URL, scale-to-zero), job (run-to-completion), and schedule (cron-for-code). Billed by the second; a stopped service costs ~nothing.
Create & manage
--command is variadic: quoted or unquoted, the words become the container argv.
--port requires the compute load balancer. Where it is not configured, create
with --port fails with feature_not_configured (501) rather than quietly
producing a service with no public URL. Omit --port for a headless service.
Lifecycle, runs & logs
Secrets
Interactive shell
ssh opens an interactive shell into a running container over a managed exec channel — no port 22, no SSH keys, no inbound access. It requires the session-manager-plugin installed locally, and the image must contain /bin/sh.
Governance
Creating a workload and exec/ssh are sensitive — depending on the user’s Account Kit they may require human approval (the command returns status: "pending_approval" and runs after naive approvals approve <id>). Pair compute with naive queue for a worker pipeline. Full guide: /docs/getting-started/compute.