diff --git a/config/.meepctl-repocfg.yaml b/config/.meepctl-repocfg.yaml
index fa088ac156147050dadeb715b44dbdad417a8f49..e48a3729ccceed648e7d72a0594dc5fcf1ca04ce 100644
--- a/config/.meepctl-repocfg.yaml
+++ b/config/.meepctl-repocfg.yaml
@@ -69,7 +69,9 @@ repo:
         # enable GitHub OAuth
         enabled: true
         # authorization url
-        auth-url: https://github.com/login/oauth/authorize
+        auth-url: https://github.com/login/device/code
+        # polling url
+        poll-url: https://github.com/login/oauth/access_token
         # access token url
         token-url: https://github.com/login/oauth/access_token
         # OAuth redirect URI
@@ -284,6 +286,7 @@ repo:
         core-pods:
           - meep-mon-engine
           - meep-platform-ctrl
+          - meep-sandbox-api
           - meep-virt-engine
           - meep-webhook
         # list of sandbox pods to monitor
@@ -344,6 +347,39 @@ repo:
           swagger: js-apps/meep-swagger-ui
           # location of AdvantEDGE frontend
           frontend: bin/meep-frontend
+      meep-sandbox-api:
+        # location of source code
+        src: go-apps/meep-sandbox-api
+        # location of binary
+        bin: bin/meep-sandbox-api
+        # location of deployment chart
+        chart: charts/meep-sandbox-api
+        # user supplied value file located @ .meep/user/values (use below file name)
+        chart-user-values: meep-sandbox-api.yaml
+        # enable meepctl build
+        build: true
+        # enable meepctl dockerize
+        dockerize: true
+        # enable meepctl deploy/delete
+        deploy: true
+        # supports code coverage measurement when built in codecov mode
+        codecov: true
+        # supports linting
+        lint: true
+        # location of API specifications
+        api:
+          - name: 'AdvantEDGE Platform Controller REST API'
+            file: go-apps/meep-sandbox-api/api/swagger.yaml
+        # location of user supplied API specifications
+        user-api:
+        # resources available to docker container image
+        docker-data:
+          # location of entry script
+          'entrypoint.sh': go-apps/meep-sandbox-api/entrypoint.sh
+          # location of Swagger UI
+          #swagger: js-apps/meep-swagger-ui
+          # location of AdvantEDGE frontend
+          #frontend: bin/meep-frontend
       meep-virt-engine:
         # location of source code
         src: go-apps/meep-virt-engine
@@ -373,7 +409,7 @@ repo:
           meep-metrics-engine: charts/meep-metrics-engine
           meep-mg-manager: charts/meep-mg-manager
           meep-rnis: charts/meep-rnis
-          meep-dai: charts/meep-dai
+#          meep-dai: charts/meep-dai
           meep-tm: charts/meep-tm
           meep-wais: charts/meep-wais
           meep-ams: charts/meep-ams
@@ -823,42 +859,42 @@ repo:
         docker-data:
           # location of entry script
           'entrypoint.sh': go-apps/meep-tm/entrypoint.sh
-      meep-dai:
-        # location of source code
-        src: go-apps/meep-dai
-        # location of binary
-        bin: bin/meep-dai
-        # location of deployment chart
-        chart: charts/meep-dai
-        # user supplied value file located @ .meep/user/values (use below file name)
-        chart-user-values: meep-dai.yaml
-        # extra build flags
-        build-flags:
-          - -mod=vendor
-        # enable meepctl build
-        build: false
-        # enable meepctl dockerize
-        dockerize: false
-        # enable meepctl deploy/delete
-        deploy: false
-        # supports code coverage measurement when built in codecov mode
-        codecov: true
-        # supports onboarded device application instantiation
-        onboardedapp: true
-        # supports linting
-        lint: true
-        # location of API specifications
-        api:
-          - name: 'AdvantEDGE Device Application Interface REST API'
-            file: go-apps/meep-dai/api/swagger.yaml
-        # location of user supplied API specifications
-        user-api:
-          - name: 'Device Application Interface REST API'
-            file: config/api/dai-api.yaml
-        # resources available to docker container image
-        docker-data:
-          # location of entry script
-          'entrypoint.sh': go-apps/meep-dai/entrypoint.sh
+#      meep-dai:
+#        # location of source code
+#        src: go-apps/meep-dai
+#        # location of binary
+#        bin: bin/meep-dai
+#        # location of deployment chart
+#        chart: charts/meep-dai
+#        # user supplied value file located @ .meep/user/values (use below file name)
+#        chart-user-values: meep-dai.yaml
+#        # extra build flags
+#        build-flags:
+#          - -mod=vendor
+#        # enable meepctl build
+#        build: false #true
+#        # enable meepctl dockerize
+#        dockerize: false #true
+#        # enable meepctl deploy/delete
+#        deploy: false #true
+#        # supports code coverage measurement when built in codecov mode
+#        codecov: true
+#        # supports onboarded device application instantiation
+#        onboardedapp: true
+#        # supports linting
+#        lint: true
+#        # location of API specifications
+#        api:
+#          - name: 'AdvantEDGE Device Application Interface REST API'
+#            file: go-apps/meep-dai/api/swagger.yaml
+#        # location of user supplied API specifications
+#        user-api:
+#          - name: 'Device Application Interface REST API'
+#            file: config/api/dai-api.yaml
+#        # resources available to docker container image
+#        docker-data:
+#          # location of entry script
+#          'entrypoint.sh': go-apps/meep-dai/entrypoint.sh
       meep-vis:
         # location of source code
         src: go-apps/meep-vis
@@ -1231,11 +1267,11 @@ repo:
         src: go-packages/meep-users
         # supports linting
         lint: true
-      meep-dai-client:
-        # location of source code
-        src: go-packages/meep-dai-client
-        # supports linting
-        lint: false
+#      meep-dai-client:
+#        # location of source code
+#        src: go-packages/meep-dai-client
+#        # supports linting
+#        lint: false
       meep-wais-client:
         # location of source code
         src: go-packages/meep-wais-client
@@ -1289,6 +1325,11 @@ repo:
         src: js-packages/meep-platform-ctrl-client
         # supports linting
         lint: false
+      meep-sandbox-api-client:
+        # location of source code
+        src: go-packages/meep-sandbox-api-client
+        # supports linting
+        lint: false
       meep-sandbox-ctrl-client:
         # location of source code
         src: js-packages/meep-sandbox-ctrl-client
diff --git a/config/permissions.yaml b/config/permissions.yaml
index 64ef6826541ad08bcde20356c881ab741ff1df61..59731f7f0bd68ee156f33287d85dee6f6b4045dd 100644
--- a/config/permissions.yaml
+++ b/config/permissions.yaml
@@ -622,6 +622,88 @@ services:
           admin: 'allow'
           user: 'block'
   #------------------------------
+  #  Sandbox API
+  #------------------------------
+  - name: 'meep-sandbox-api'
+    path: '/sandbox-api/v1'
+    sbox: true
+    default:
+      mode: 'allow'
+    fileservers:
+      - name: 'Api'
+        path: '/api'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'UserApi'
+        path: '/user-api'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+    endpoints:
+      - name: 'Index'
+        path: '/'
+        method: 'GET'
+        mode: 'allow'
+      - name: 'login'
+        path: '/login'
+        method: 'POST'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'logout'
+        path: '/logout'
+        method: 'POST'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'sandboxAppInstancesGET'
+        path: '/sandboxAppInstances'
+        method: 'GET'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'sandboxLogsSubscriptionsPOST'
+        path: '/sandboxLogsSubscriptions'
+        method: 'POST'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'sandboxLogsSubscriptionsDELETE'
+        path: '/sandboxLogsSubscriptions/{subscription_reference}'
+        method: 'DELETE'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'sandboxNetworkScenariosGET'
+        path: '/sandboxNetworkScenarios'
+        method: 'GET'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'sandboxNetworkScenarioPOST'
+        path: 'sandboxNetworkScenarios/{network_scenario_id}'
+        method: 'POST'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+      - name: 'SandboxNetworkScenarioDELETE'
+        path: 'sandboxNetworkScenarios/{network_scenario_id}'
+        method: 'DELETE'
+        mode: 'allow'
+        roles:
+          admin: 'allow'
+          user: 'allow'
+ #------------------------------
   #  RNI Service (Sbox)
   #------------------------------
   - name: 'meep-rnis'