sbx/antigravity-mixin
Google Antigravity CLI overlay for a shell workload, with Gemini credentials and MCP setup.
9.3K
sbx/antigravity-mixin repository overview
Google Antigravity CLI overlay for a shell workload, with Gemini credentials and MCP setup.
| Name | Required | Default | Description |
|---|---|---|---|
version | Required | — | Antigravity CLI version asserted after installation |
[email protected]| Type | Required | Description | |
|---|---|---|---|
com.docker.sandbox/network-policy@1 | Required | — | |
com.docker.sandbox/credential@1 | Optional | Gemini API key for Antigravity's headless API-key mode | |
com.docker.sandbox/lifecycle@1 | Required | — | |
com.docker.sandbox/agent-context@1 | Optional | — | |
com.docker.sandbox/agent-context@2 | Optional | — | |
com.docker.sandbox/acp@1 | Optional | — | |
deb/jqApply this mixin to a sandbox
sbx run <agent> --kit sbx/antigravity-mixin:latestMake sure you have docker sbx installed
Run the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbxGoogle Antigravity mixin for Docker Sandboxes
This v3 mixin Kit packages Google Antigravity for Docker Sandboxes. It adds the agent, authentication configuration, and runtime integration to a compatible workload. The workload keeps its entrypoint.
This Kit is built on Docker Hardened Images.
Run
sbx run sbx/shell:latest --kit sbx/antigravity-mixin:latest /path/to/workspace
When the shell opens, run agy. This kit supplies an overlay, so it needs a workload such as
Shell.
A manual agy launch keeps its native approval behavior. To match the workload's automatic tool approval, run
agy --dangerously-skip-permissions.
Kit arguments
This kit has no create-time kit arguments.
Authentication and configuration
Bind a Gemini API key on the host with sbx secret set google to use the Gemini provider. The runtime supplies a
proxy-managed credential. With no bound Google credential, agy uses its interactive Google sign-in.
For Google OAuth, skip the optional google credential during setup. Open the sign-in URL in your browser, then paste
the authorization code into the terminal. To switch from API-key mode to OAuth, remove the host's google credential
binding and recreate the sandbox.
When the runtime supplies an MCP gateway, the kit registers it automatically in ~/.gemini/config/mcp_config.json.
Existing unrelated settings and server entries are preserved.
ACP support is included. Configure an ACP client to open a non-TTY stream to the sandbox.
sbx exec -i <sandbox> agy acp --dangerously-skip-permissions
The sandbox supplies the isolation for agent tool execution. Launch the kit through Docker Sandboxes and configure extra tool or MCP destinations in the runtime network policy as needed.
If a tool cannot reach a service, run sbx policy log on the host to identify blocked destinations.
Related kits
sbx/antigravity provides the complete agent workload.
Source and security
For the Kit format and capability contracts, see the Sandbox Kit v3 specification.
For runtime setup, see the Docker Sandboxes documentation. For provenance, SBOM, VEX, and image verification, see the Docker Hardened Images documentation.
Google and Antigravity are trademarks of Google LLC. Product names and logos do not imply sponsorship or endorsement.