Networking

# Allow only specific domains — everything else is blocked
nono run --allow-cwd --allow-domain api.openai.com -- my-agent

# Block all outbound network
nono run --allow-cwd --block-net -- my-agent

# Inject an API key the sandbox never sees
nono run --allow-cwd --credential openai -- my-agent

nono run --allow-cwd --block-net -- cargo build

{
  "network": { "block": true }
}

# Allow specific domains (unrestricted access)
nono run --allow-cwd --allow-domain api.openai.com --allow-domain api.anthropic.com -- my-agent

# Restrict a domain to specific path patterns
nono run --allow-cwd \
  --allow-domain 'https://github.com/my-org/**' \
  --allow-domain 'https://github.com/my-other-org/**' \
  -- my-agent

# Use a predefined network profile
nono run --allow-cwd --network-profile claude-code -- claude

nono run --profile openclaw --proxy-port 19999 --listen-port 18789 -- openclaw gateway

{
  "meta": { "name": "my-agent" },
  "filesystem": { "allow": ["$WORKDIR"] },
  "network": {
    "network_profile": "developer",
    "allow_domain": ["my-internal-api.example.com"]
  }
}

nono run --allow-cwd --network-profile developer --allow-domain my-internal-api.example.com -- my-agent

{
  "network": {
    "network_profile": "developer",
    "no_proxy": ["redis", ".internal.example"]
  }
}

nono run --allow-cwd --credential openai -- my-agent

nono run --allow-cwd --network-profile enterprise \
  --upstream-proxy squid.corp:3128 -- my-agent

nono run --allow-cwd --network-profile enterprise \
  --upstream-proxy squid.corp:3128 \
  --upstream-bypass git.internal.corp \
  --upstream-bypass "*.dev.local" \
  -- my-agent

{
  "network": {
    "network_profile": "enterprise",
    "upstream_proxy": "squid.corp:3128",
    "upstream_bypass": ["git.internal.corp", "*.dev.local"]
  }
}

export NONO_UPSTREAM_PROXY=squid.corp:3128
export NONO_UPSTREAM_BYPASS=git.internal.corp,*.dev.local
nono run --allow-cwd --network-profile enterprise -- my-agent

# Ephemeral port, token auth, prints connection info
nono proxy

# Fixed port
nono proxy --port 8080

# Allowlist a host
nono proxy --allow-domain github.com

# Load network/credential settings from a profile
nono proxy --profile my-profile

  nono proxy listening on 127.0.0.1:8080
  proxy URL: http://nono:<token>@127.0.0.1:8080
  token:     <token>

  export HTTPS_PROXY=http://nono:<token>@127.0.0.1:8080
  export HTTP_PROXY=http://nono:<token>@127.0.0.1:8080

  Press Ctrl-C to stop.

nono proxy \
  --allow-domain 'https://api.github.com/**' \
  --proxy-ca-cert ./ca.crt \
  --proxy-ca-key ./ca.key

# PKCS#8 EC P-256 private key
openssl ecparam -name prime256v1 -genkey -noout -out ca.ec.key
openssl pkcs8 -topk8 -nocrypt -in ca.ec.key -out ca.key && rm ca.ec.key

# Self-signed CA certificate (30-day validity here)
openssl req -x509 -new -nodes -key ca.key -sha256 -days 30 \
  -subj "/CN=my-proxy-ca" \
  -addext "basicConstraints=critical,CA:TRUE" \
  -addext "keyUsage=critical,keyCertSign,cRLSign,digitalSignature" \
  -out ca.crt

# Allow only chat completions through OpenAI
nono run --allow-cwd --credential openai \
  --allow-endpoint 'openai:POST:/v1/chat/completions' \
  -- my-agent

# Allow GitHub issue reads and comment writes, block everything else
nono run --allow-cwd --credential github \
  --allow-endpoint 'github:GET:/repos/*/issues/**' \
  --allow-endpoint 'github:POST:/repos/*/issues/*/comments' \
  -- my-agent

{
  "network": {
    "custom_credentials": {
      "gitlab": {
        "upstream": "https://gitlab.example.com",
        "credential_key": "gitlab_token",
        "endpoint_rules": [
          { "method": "GET", "path": "/api/v4/projects/*/merge_requests/**" },
          { "method": "POST", "path": "/api/v4/projects/*/merge_requests/*/notes" }
        ]
      }
    }
  }
}

# Terminal 1: MCP server listening on port 3000
nono run --block-net --open-port 3000 --allow ./mcp-server -- node server.js

# Terminal 2: Agent connecting to the MCP server
nono run --block-net --open-port 3000 --allow ./client -- claude

nono run --network-profile claude-code --open-port 3000 --allow-cwd -- claude

nono run --allow-cwd --network-profile developer --listen-port 3000 -- npm run dev

(deny network*)
(allow network-outbound (remote tcp "localhost:PORT"))
(allow system-socket (socket-domain AF_INET) (socket-type SOCK_STREAM))
(allow system-socket (socket-domain AF_INET6) (socket-type SOCK_STREAM))

ALLOW CONNECT api.openai.com:443
DENY  CONNECT 169.254.169.254:80 reason=denied_cidr

nono run -vv --network-profile claude-code --allow-cwd -- my-agent

nono run --profile claude-code --allow-http2 -- claude