Environment variables
Variables defined here are available at runtime to every connected agent — inside the sandbox, and to the tools that need them.
••••••••) whenever they are read back. Saving a form that contains a masked value leaves the stored secret untouched, so editing an unrelated field cannot silently blank out a key.
Values that depend on the run
A variable’s value can be a template, resolved when the sandbox starts:
That is how one environment serves many customers from a single configuration:
{{metadata.tenantApiKey}} is a different value on every run, without a variable per tenant.
Which value wins
The same variable can be set in three places. Most specific wins:1
On the connection
Set for one agent’s link to this environment. Use it for what genuinely differs per agent.
2
On the environment
The shared value, used by everything connected.
3
On the sandbox
The fallback, for values that only make sense inside the machine.
Shared tools
Tool groups and MCPs added to an environment become available to every connected agent and assistant. This is the usual way to give a fleet of agents the same set of integrations without configuring each one. The behaviour is additive: an agent keeps the tools it had, plus the environment’s.Shared knowledge
Documents and folders attached to an environment reach every connected entity, exactly as if they had been attached individually. It is the right level for the material that everyone needs — the style guide, the glossary, the standard operating procedures. See Knowledge.Per-tenant integrations
An environment can also define which third-party apps the end users of its assistants are offered, so the catalogue is set once for a whole product rather than per assistant. See Integrations for your end users.Connecting an agent
From the agent’s configuration, pick the environment. From the environment, see everything connected to it.
If the agent already had its own terminal sandbox configured, connecting an environment that brings a sandbox will supersede it. Devic warns you at that moment — the earlier configuration is not deleted, it simply stops being used.