InternetSettings

Overview

InternetSettings lets you restrict outbound network access from a sandbox to a specific list of domains. This is useful when you want to give an agent internet access but limit it to trusted services only. When you set InternetSettings on a VMConfig, the sandbox can only connect to the domains you allow. All other outbound connections are blocked.

Import

from smolvm import InternetSettings

Fields

allowed_domains

list[str]

required

List of domain names the sandbox is allowed to connect to. SmolVM automatically normalizes entries by stripping protocols and trailing slashes, so "https://api.example.com/" and "api.example.com" are treated the same.

Examples

Allow specific domains

from smolvm import SmolVM, VMConfig, InternetSettings

config = VMConfig(
    internet=InternetSettings(
        allowed_domains=["api.openai.com", "api.anthropic.com"]
    )
)

with SmolVM(config=config) as vm:
    # This works:
    vm.run("curl -s https://api.openai.com/v1/models")

    # This is blocked:
    vm.run("curl -s https://malicious-site.example.com")

Agent with restricted internet

from smolvm import SmolVM, InternetSettings, VMConfig

config = VMConfig(
    internet=InternetSettings(
        allowed_domains=[
            "api.github.com",
            "pypi.org",
            "files.pythonhosted.org",
        ]
    )
)

with SmolVM(config=config) as vm:
    vm.run("pip install requests")  # allowed (pypi.org)

VMConfig - Full VM configuration reference
Networking - How SmolVM networking works
Security - Isolation and security model

Last modified on May 5, 2026

ImageSource Kernel helpers

⌘I

Celesto CLI

SmolVM API

SmolVM CLI

Agentor API

Overview

Import

Fields

Examples

Allow specific domains

Agent with restricted internet

​Overview

​Import

​Fields

​Examples

​Allow specific domains

​Agent with restricted internet

​Related

Overview

Import

Fields

Examples

Allow specific domains

Agent with restricted internet

Related