Customize the Sandbox Network Policy

View as Markdown

Choose the policy workflow that matches the scope and persistence of the network access change. NemoClaw declares sandbox policy in YAML, and NVIDIA OpenShell enforces it at runtime.

GoalUse this workflow
Change every future sandbox for an agentChange the Baseline Network Policy
Add or remove a maintained preset for one sandboxApply Policy Presets
Add a reviewed endpoint that no maintained preset coversCreate Custom Policy Presets
Allow direct TLS negotiation for an exact endpointConfigure Raw TLS Passthrough
Replace the complete live policyReplace the Live Network Policy
Give the sandbox agent a redacted policy summaryExplain Network Policy to Agents
Approve or deny one blocked requestApprove or Deny Network Requests

If a sandbox needs an HTTP service on the host, expose the service on a host IP that the OpenShell gateway can reach. Apply a custom preset with nemoclaw <sandbox> policy add --from-file. Do not rely on host.docker.internal as a general host-service path because it bypasses the OpenShell policy path and may not be reachable. Refer to Agent cannot reach a host-side HTTP service.

Adding a host to the egress policy permits a connection only when the endpoint, port, method, and binary rules match. OpenShell applies SSRF protection separately. It can deny a request when the final address resolves to a loopback, private, link-local, or blocked internal range. If a package installer or browser download still fails after you allow the public host, install the binary at build time. Use nemoclaw onboard --from instead of runtime egress.

Static Changes

Static changes modify the policy source that NemoClaw reads during sandbox creation. Follow Change the Baseline Network Policy to edit the agent policy file, rerun onboarding, and verify the result.

Dynamic Changes

Dynamic changes update a running sandbox. Use Apply Policy Presets for reviewed additions that NemoClaw records and replays.

Use Approve or Deny Network Requests for one-off access. Use Replace the Live Network Policy only when a preset cannot express the complete change.

Policy Presets

Maintained policy presets cover common integrations and package services. Follow Apply Policy Presets to preview, apply, reapply, list, or remove them. For guided service workflows, refer to Common Integration Policy Examples.

Custom Preset Files

Custom preset files add reviewed endpoint access without changing the baseline. Follow Create Custom Policy Presets to author, validate, apply, and remove a custom preset. That page also contains the URL-based MCP server recipe formerly located in this guide.

Raw TLS Passthrough

Some endpoints require direct TLS negotiation and fail through inspected L7 proxying. Follow Configure Raw TLS Passthrough for the bounded access: full and tls: skip recipe.

Live Policy Replacement

OpenShell policy set replaces the complete live policy. Follow Replace the Live Network Policy to export the round-trippable base, preserve existing entries, and apply a validated replacement.

Agent Policy Context

Agents need a redacted view of active presets and policy verification state. Follow Explain Network Policy to Agents to print or refresh that context and interpret failure classifications.