crewai-code-interpreter

CrewAI agent with a Tenki code interpreter

Give a CrewAI agent a code interpreter — a tool that runs Python in a disposable Tenki sandbox and hands the output back. The same pattern E2B and Daytona ship for CrewAI, on Tenki microVMs. Python, on the official tenki-sandbox SDK.

The tool (tenki_tool.py)

from crewai.tools import BaseTool
from tenki_sandbox import Sandbox

class TenkiCodeInterpreter(BaseTool):
    name = "run_python"
    description = "Execute Python in a secure, disposable sandbox and return its output."
    # ...args_schema + a sandbox passed in...
    def _run(self, code: str) -> str:
        result = self._sandbox.exec("python3", "-c", code)
        return f"{result.stdout_text}{result.stderr_text}".strip()

exec(command, *args) passes args straight through (no shell splitting), so multi-line, model-generated code goes across as one -c argument with no escaping surprises.

Setup (Python 3.10+)

uv venv                                   # or: python3.11 -m venv .venv
uv pip install -r requirements.txt        # tenki-sandbox + crewai
export TENKI_AUTH_TOKEN=...               # see the auth note below

Auth note. The Python SDK authenticates cleanly with a tk_ API key (export TENKI_AUTH_TOKEN=tk_…). A tenki login browser session token also works, but — unlike the Node SDK — the Python SDK won't auto-detect it; pass it as cookie:<token> so it's sent as a cookie (verify.py does this for you). It's an SDK gap, not yours.

Verify it (no LLM needed)

node verify.mjs      # or: .venv/bin/python verify.py

verify.py builds the tool over a live sandbox and calls it directly (tool._run(code=...)), asserting the result — proving the Tenki-facing half without a model key. This is what CI runs.

Run the full agent

export OPENAI_API_KEY=sk-...
.venv/bin/python agent.py    # a CrewAI agent computes an answer using the sandbox

Notes

• Requires Python 3.10+ (a CrewAI requirement); the rest of the cookbook is Node, so this example is verified via the verify.mjs → verify.py shim.
• Tenki confines file I/O to /home/tenki — write to relative paths.
• Official SDK + full API: tenki.cloud/docs/sandbox/sdk.