---
title: "oz0 tenant sandbox-limits"
description: "Usage and flags for oz0 tenant sandbox-limits."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/tenant/sandbox-limits"
---
# oz0 tenant sandbox-limits

> Usage and flags for oz0 tenant sandbox-limits.

For: Operators and developers looking up a command.

Every sandbox on a Linux node with sandbox tier 1 runs under memory, process and CPU limits, held by a cgroup the node's service delegates to it or by a systemd scope: a harness session gets 4096 MiB, 1024 processes and 2 CPUs, a plugin's MCP server 1024 MiB, 256 and 1, a command of its own (an ACP terminal, a test run) 2048 MiB, 512 and 2.

An agent asks for others with limits.memory_mb, limits.pids and limits.cpus in its definition. The ceiling set here is the most any one sandbox of the tenant gets, whatever its agent asks, and lowers a default above it. A sandbox that reaches its memory limit is stopped, all of it; one that reaches its process limit cannot start more.

The flags given replace the whole ceiling (a field not given has none); with no flags the ceiling is shown, and --clear removes it.

## Usage

```bash
oz0 tenant sandbox-limits <tenant> [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --clear
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      remove the ceiling
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --cpus
      </code>
    </td>
    
    <td>
      float
    </td>
    
    <td>
      
    </td>
    
    <td>
      the most CPU time, in cores (0: no ceiling)
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --json
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      print JSON instead of a table
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --memory-mb
      </code>
    </td>
    
    <td>
      int
    </td>
    
    <td>
      
    </td>
    
    <td>
      the most memory, in MiB (0: no ceiling)
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --pids
      </code>
    </td>
    
    <td>
      int
    </td>
    
    <td>
      
    </td>
    
    <td>
      the most processes and threads (0: no ceiling)
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.