Create native Linc session
Creates a native Linc session in a sandboxed runtime with scoped Case.dev credentials. This endpoint starts the sandbox actor only; messages and event replay use separate endpoints.
Authorizations
API key starting with sk_case_
Headers
Stable internal user or customer identifier for AI Gateway cost reporting.
256Comma-separated AI Gateway reporting tags. At most 10 unique tags, each 1–64 characters.
Body
Optional ordered availability fallbacks for this session. Requires an explicit model. An empty array disables fallbacks; omission preserves existing runtime behavior. Linc switches within the same session, preserving context.
8100Processing tier for eligible OpenAI GPT models. Priority provides lower latency at premium cost.
default, priority Opt-in persistent workspace identity. Requires conversationKey. Omit both fields to preserve isolated legacy session behavior.
512Stable conversation identity within workspaceKey. Required in workspace mode and idempotent for repeated creates.
512Days the runtime and its saved state are kept after the last activity. Defaults to 1 for standalone sessions; workspace-mode conversations (workspaceKey) and the C3 system key default to indefinite (see runtimeRetention). Once they are deleted, commands to the session answer 410 linc_runtime_expired; its events stay readable. A workspace keeps the value it was created with; a larger value on a later conversation raises it. Applies to Vercel Sandbox runtimes; accepted and stored on Daytona, where it has no effect. Mutually exclusive with runtimeRetention.
1 <= x <= 30indefinite keeps the runtime and its saved state until the session (or, in workspace mode, its last conversation) is deleted, so a chat can resume after any idle gap. The default in workspace mode; standalone chats opt in with it, one-off runs leave it unset. Raises an existing workspace to indefinite. Mutually exclusive with runtimeRetentionDays.
indefinite Optional server-enforced capability profile. read_only grants only retrieval/inference service reads; session event ingestion remains bound to the exact managed runtime credential.
read_only Legacy explicit whole-vault scope. Mutually exclusive with vaultScopes.
Exact object allowlist per vault. Empty objectIds denies object access for that vault. Mutually exclusive with vaultIds.
Optional caller-provided scoped Case.dev API key for the runtime.
Privileged C3-only hidden app instructions to append to the sandbox AGENTS.md.
Skills API slugs to install into the runtime sandbox before the native session starts.
Defaults to local preinstallation. MCP is an opt-in, org-allowlisted rollout on a separately pinned image; requires a new standalone session and no skillSlugs preinstallation. Execution remains content-approval gated.
local, mcp When true, inject all active org document templates into the using-document-templates skill.
Specific document template slugs to inject into the using-document-templates skill.
Optional caller-supplied executable tool files to install into .linc/extensions/ before the agent starts. Only supported for standalone sessions without capabilityPolicy: read_only. Rejected with a 400 on persistent (workspaceKey/conversationKey) or read_only sessions. At most 10 files, 64KB each, 256KB total. Extension destinations and content hashes are recorded in the session-created audit event; raw code is not logged.
10Response
Linc session created

