`GET /sandboxes/{id}/files`

Returns the raw bytes of one guest file (?path), capped at ?max_bytes. Content only, guest → host; nothing is written host-side.

### Authorizations

- `bearerAuth` — HTTP bearer. Daemon API key. Omit on a keyless loopback daemon.

### Path parameters

- `id` string · required — Sandbox ID, e.g. sbx_ab12cd34.

### Query parameters

- `path` string · required — Guest file path to read.
- `max_bytes` integer · optional — Cap on bytes returned (default 10 MiB).

### Responses

**200** — OK

`application/octet-stream`:

**400** — Bad Request

`application/json`:

- `error` string · optional

**404** — Not Found

`application/json`:

- `error` string · optional