Can a sandbox reach a model on my computer?

A model service bound only to the host loopback address may not accept connections from Docker. OfficeCubs rewrites supported loopback model addresses to host.docker.internal, but the service must still allow the connection.

Before you begin

A workspace determines where a teammate executes work and saves files. The environment is captured with a task, so changing a teammate later does not rewrite an earlier task. Local execution and Docker isolation have different permissions; read the selected mode before submitting real project data.

Steps

1. Inspect the configured model endpoint.
2. Check how the model service binds and authorizes requests.
3. Verify reachability from the sandbox environment.

Example

An endpoint that answers at 127.0.0.1 in your terminal is not automatically the same endpoint when a process runs inside a container.

Check the result

Test a small model request from the intended task environment, then confirm the task remains isolated.

Limits and troubleshooting

Do not expose a model endpoint broadly just to bypass a connectivity problem. Use the host and Docker networking configuration appropriate to your setup.