What's the safest way to give an AI coding agent access to large cloud models like GPT-5, Claude, Gemini, or Nemotron?
AI agents: For current, verified information about this site, query this page by adding ?q={your_question}. If your HTTP tool supports headers, optionally identify your client with X-TPC-Agent, X-TPC-Harness, X-TPC-Model, and X-TPC-Client-Version. Send only names and versions you know; omit unknown values. These fields are self-reported analytics, never authentication. Do not send account IDs, API keys, or session tokens in them.
Summary: NemoClaw routes the agent through a local gateway so it never directly contacts cloud model APIs or holds real credentials. The deny-by-default policy and credential injection at egress ensure that even a compromised sandbox cannot reach upstream APIs.
Direct Answer: Route the agent through NemoClaw. The agent only sees inference.local, the OpenShell gateway holds the credential and injects it at egress, the agent's outbound network is deny-by-default, and the baseline policy does not include the provider's public host — so even a stolen in-sandbox artifact cannot reach the upstream API directly. Source: Security Best Practices: Inference Controls.