On this page

Network policies control what external hosts and ports a computer can reach. Use them to sandbox untrusted workloads, enforce egress restrictions, or prevent AI agents from making unexpected outbound connections.

Base path: /api/v1/computers/{id}/network-policy

Quick Start

import { Miosa } from '@miosa/sdk';

const client = new Miosa();

// Restrict to only allow HTTPS to GitHub and PyPI
await client.networkPolicy.update(computerId, {
  mode: 'allowlist',
  rules: [
    { host: 'github.com',  port: 443, protocol: 'tcp' },
    { host: 'pypi.org',    port: 443, protocol: 'tcp' },
    { host: 'files.pythonhosted.org', port: 443, protocol: 'tcp' },
  ],
});
curl -X PUT https://api.miosa.ai/api/v1/computers/{id}/network-policy 
  -H "Authorization: Bearer $MIOSA_API_KEY" 
  -H "Content-Type: application/json" 
  -d '{
    "mode": "allowlist",
    "rules": [
      { "host": "github.com", "port": 443, "protocol": "tcp" }
    ]
  }'

Endpoints

MethodPathDescription
GET/computers/{id}/network-policyGet current network policy
PUT/computers/{id}/network-policySet network policy (replaces existing)
DELETE/computers/{id}/network-policyReset to default (unrestricted)

Get Network Policy

GET /api/v1/computers/{id}/network-policy

Response — 200 OK

{
  "data": {
    "computer_id": "...",
    "mode": "unrestricted",
    "rules": [],
    "updated_at": "2026-04-11T00:00:00Z"
  }
}

Policy Modes

ModeDescription
unrestrictedDefault. All outbound traffic allowed
allowlistOnly listed hosts/ports permitted
denylistAll traffic permitted except listed rules
isolatedAll outbound blocked (DNS and MIOSA internal excluded)
curl https://api.miosa.ai/api/v1/computers/{id}/network-policy 
  -H "Authorization: Bearer $MIOSA_API_KEY"

Set Network Policy

PUT /api/v1/computers/{id}/network-policy

Replaces the entire policy. Partial updates are not supported — send all rules on every PUT.

Request Body

FieldTypeRequiredDescription
modestringYes"unrestricted", "allowlist", "denylist", or "isolated"
rulesarrayNoRequired when mode is "allowlist" or "denylist"

Rule Object

FieldTypeRequiredDescription
hoststringYesHostname or CIDR block (e.g. 10.0.0.0/8)
portintegerNoPort number. Omit to match all ports
protocolstringNo"tcp", "udp", or "any" (default)

Response — 200 OK

Updated policy object.

Errors

StatusErrorCause
400rules required for allowlist/denylist modeEmpty rules for a filtering mode
404computer not foundComputer does not exist
# Full isolation except for GitHub
curl -X PUT https://api.miosa.ai/api/v1/computers/{id}/network-policy 
  -H "Authorization: Bearer $MIOSA_API_KEY" 
  -H "Content-Type: application/json" 
  -d '{
    "mode": "allowlist",
    "rules": [
      { "host": "github.com", "port": 443, "protocol": "tcp" },
      { "host": "objects.githubusercontent.com", "port": 443, "protocol": "tcp" }
    ]
  }'

Reset to Default

DELETE /api/v1/computers/{id}/network-policy

Removes any custom policy. The computer reverts to unrestricted outbound access.

Response — 200 OK

{
  "data": { "computer_id": "...", "mode": "unrestricted" }
}
curl -X DELETE https://api.miosa.ai/api/v1/computers/{id}/network-policy 
  -H "Authorization: Bearer $MIOSA_API_KEY"

Common Recipes

Sandbox an untrusted AI task

# Lock down before running untrusted code
client.network_policy.update(computer_id, mode="isolated")

# Run the task
result = client.exec(computer_id, command="python3 /home/user/untrusted.py")

# Restore after
client.network_policy.delete(computer_id)

Allow only package registries for a build environment

const packageHosts = [
  { host: 'registry.npmjs.org', port: 443, protocol: 'tcp' as const },
  { host: 'pypi.org',           port: 443, protocol: 'tcp' as const },
  { host: 'files.pythonhosted.org', port: 443, protocol: 'tcp' as const },
  { host: 'pkg.go.dev',         port: 443, protocol: 'tcp' as const },
  { host: 'proxy.golang.org',   port: 443, protocol: 'tcp' as const },
];

await client.networkPolicy.update(computerId, {
  mode: 'allowlist',
  rules: packageHosts,
});

Block a known malicious IP range

await client.networkPolicy.update(computerId, {
  mode: 'denylist',
  rules: [
    { host: '185.220.0.0/16' },
  ],
});

Was this helpful?