Networking

Egress policy is one argument on create. Not a sidecar, not a firewall you build inside the sandbox yourself.

Egress modes

allowdefault; unrestricted egress
denyno network at all, for closed-internet evals
allowlistonly the hosts you name (model APIs, package mirrors)
sb = nc.sandboxes.create(
    template_id=tpl,
    egress="allowlist",
    allow=["api.anthropic.com", "api.openai.com"],
)

Notes

  • Private registry pulls are supported at template pack and sandbox create.
  • Docker inside the sandbox shares the sandbox's egress policy; a compose stack under deny keeps inter-service networking but no internet.
  • Static egress IPs per org are available for allowlisting Numinous at your upstream providers.