sha256:e5dbaa9c6f16952d8240675726c6f2f4080b575a087ae9d40da319938364f88d
Last pushed
2 days by dockerpublicbot
Type
Sandbox Kit
Manifest digest
sha256:e5dbaa9c6f16952d8240675726c6f2f4080b575a087ae9d40da319938364f88d
Runs mend-guardrails-server on loopback and points Codex/OpenAI-compatible agents at it via OPENAI_BASE_URL so prompt bodies are inspected (secrets, PII, prompt injection) before they reach the model. Also exposes /v1/guard/* and mend-guard-text for scanning MCP and tool-result text.
| Name | Required | Default | Description |
|---|---|---|---|
interceptTui | Optional | false | Opt in to route Codex TUI model calls through loopback Guardrails (user-level model_provider=mend_guardrails). Default false keeps ChatGPT subscription TUI auth. When true, requires a host OpenAI platform API key with api.responses.write (and billing), plus an API model name (not Sol/Luna-only ChatGPT catalog). Options: false, true |
offline | Optional | false | Set MEND_GUARDRAILS_OFFLINE. Default false (online: platform registration and telemetry). Use true with policySource=local so the SDK can load the kit sandbox.json. MEND_KEY is still required. Do not combine with policySource=api. Options: false, true |
policySource | Optional | api | Default api loads the org policy from the Mend Platform (use with offline=false). Enable detectors in the platform policy as needed. Opt in to local for the kit sandbox.json file (startup then sets offline=true). Options: local, api |
pythonSrc | Optional | | Absolute path to a local mend-guardrails-python checkout for editable install instead of the Mend downloads wheel. Empty (default) installs from PyPI + downloads.mend.io. Mount the same path as an extra sbx workspace (not :ro) so install can write egg-info, e.g. sbx run ... --kit-arg mend-guardrails.pythonSrc="$SRC" . "$SRC". |
*.mend.io
mend.io
pypi.org
files.pythonhosted.org
github.com
objects.githubusercontent.com
release-assets.githubusercontent.com
sbx run <agent> --kit sbx/mend-guardrails-kit:20260921-bb481ed080f7dd861c0205a0691b4b77d1375b08Run the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbx