Security and Data Access

Rebyte provides controls for project visibility and Agent Runtime network security.

Agent Runtime Security

Each Agent Runtime can be configured with network egress controls to limit what external services the AI agent can access. This is configured per Environment.

Network Egress

You can enable or disable network access entirely. When disabled, the agent cannot make any outbound network requests.

Domain Allowlist

When network egress is enabled, you can choose from three allowlist modes:

  • Package Managers Only (default) - Allows access to common development services:
    • AI Services: api.anthropic.com, api.openai.com, generativelanguage.googleapis.com
    • GitHub: github.com
    • NPM: registry.npmjs.org, npmjs.com
    • Python: pypi.org, files.pythonhosted.org
    • Rust: crates.io, index.crates.io
    • Ubuntu: archive.ubuntu.com, security.ubuntu.com
  • All Domains - Allows access to any domain. Use with caution.
  • None - Blocks all external domains. You can add specific domains manually.

Additional Allowed Domains

For "Package Managers Only" and "None" modes, you can add custom domains that your agent needs to access. This is useful for internal APIs or specific services your project requires.

Project Visibility Options

Private

Only you can see the project and its tasks. This is the default.

Shared

All members of your organization can see and collaborate on tasks. Note: All tasks in the project become visible to team members.

Public

Anyone with the link can view the project (read-only). Note: All tasks and their conversations become publicly viewable.

Learn more about projects and tasks.