OpenAI Agents SDK — overview

​

What this section covers

​

Install

pip install "declaw[openai-agents]"

​

Credentials

export DECLAW_API_KEY=dcl_...
export DECLAW_DOMAIN=api.declaw.ai
export OPENAI_API_KEY=sk-...

​

Import surface

from declaw.openai import (
    DeclawSandboxClient,
    DeclawSandboxClientOptions,
    SecurityPolicy,
    PIIConfig,
    InjectionDefenseConfig,
    ToxicityConfig,
    CodeSecurityConfig,
    InvisibleTextConfig,
    NetworkPolicy,
    TransformationRule,
    SandboxLifecycle,
    SandboxNetworkOpts,
    # Volumes: upload a tarball once, attach to one or many agent sandboxes.
    AsyncVolumes,
    Volumes,
    VolumeAttachment,
)

​

Template coverage

​

Two layers of isolation every recipe relies on

1. Filesystem isolation: every sandbox boots with a fresh /workspace overlay. Artifacts an agent writes (reports, logs, compiled binaries, trained models) disappear when the sandbox terminates. No host bleed-through, no scratch cleanup to manage.
2. Environment isolation: envs={...} pushes key/value pairs into the microVM as real process env vars. The agent reads them with printenv — they never need to appear in the prompt, so secrets stay out of the LLM trace.

• PIIConfig(rehydrate_response=True) — redact PII on the way out, restore it on the way back in, so the agent code works unchanged while the upstream model never sees real PII.
• NetworkPolicy(allow_out=[...]) — default-deny outbound; only the listed hosts reach the internet.
• InjectionDefenseConfig(enabled=True, domains=["api.openai.com"]) — flag prompt-injection attempts in HTTP bodies before they hit the upstream LLM. Scanning is per-domain: only requests to hosts listed in domains are scanned, so name the LLM host there.
• TransformationRule(match=..., replace=...) — directional regex rewrites, e.g. redact AWS keys before they leave the VM.

​

Getting started