anticells 0.2.0

Official Python SDK for ANTICELLS products.

ANTICELLS Python SDK

Python SDK for ANTICELLS products. The Gaslighter product is available as a namespace inside the package:

from anticells import gaslighter

client = gaslighter.Client.from_env()

Customers normally provide only an API key.

Install

From PyPI:

python -m pip install anticells

For local development from this repository:

python -m pip install -e .\sdk

For maintainers building release artifacts:

cd sdk
python -m pip install -U build twine
python -m build
python -m twine check dist/*

This creates both a wheel and source distribution in sdk/dist/.

For a built local wheel:

python -m pip install .\dist\anticells-0.2.0-py3-none-any.whl

Environment

$env:ANTICELLS_API_KEY = "glk_live_customer_key"

Optional auth header override:

$env:ANTICELLS_API_KEY_HEADER = "X-API-Key"

For Authorization: Bearer <key> instead:

$env:ANTICELLS_API_KEY_HEADER = "Authorization"

Command Line

Check connectivity:

anticells gaslighter health
anticells gaslighter personas

Manage account API keys:

anticells gaslighter keys list
anticells gaslighter keys create --name "Notebook key"
anticells gaslighter keys revoke "key_..."

Register and inspect targets:

anticells gaslighter targets list
anticells gaslighter targets get "target_..."

anticells gaslighter targets register `
  --url "http://localhost:8080/api/v1/execute" `
  --mode relay `
  --name "Production assistant" `
  --skip-manifest `
  --input-field "message" `
  --body-template '{"message":"__TARGET_INPUT__"}'

Run the relay from the machine that can reach a private/local target:

anticells gaslighter relay run `
  --target "target_..." `
  --url "http://127.0.0.1:8080/api/v1/execute" `
  --target-credential "target_model_key_or_jwt" `
  --target-auth-type bearer `
  --target-auth-header "Authorization" `
  --target-auth-prefix "Bearer" `
  --input-field "message" `
  --body-template '{"message":"__TARGET_INPUT__"}'

Run one campaign:

anticells gaslighter attacks run `
  --target "target_..." `
  --objective "Evaluate whether the target preserves approval boundaries." `
  --persona "audit_interface"

Run a family sweep:

anticells gaslighter sweeps run `
  --target "target_..." `
  --family "system_prompt_extraction" `
  --family "tool_abuse" `
  --prompts-per-family 2

Quick Start

from anticells import gaslighter

client = gaslighter.Client(api_key="glk_live_customer_key")

target = client.register_target(
    url="http://target-service:8080/chat",
    name="Staging assistant",
    connection_mode="sdk_relay",
    skip_manifest=True,
    target_body_template={"message": "__TARGET_INPUT__"},
    target_body_template_configured=True,
    target_input_field="message",
)

relay_runner, relay_thread, relay_stop = gaslighter.start_target_relay_thread(
    client,
    target_id=target.id,
    target_url="http://target-service:8080/chat",
    body_template={"message": "__TARGET_INPUT__"},
    body_template_configured=True,
    input_field="message",
)

try:
    result = client.attack(
        target_id=target.id,
        objective="Evaluate whether the target preserves approval boundaries.",
        persona="audit_interface",
        verbose=True,
    )
    print(result.outcome)
    print(result.judge_summary)
finally:
    relay_stop.set()
    relay_thread.join(timeout=5)
    relay_runner.close()

objective, custom_objective, and the API-native bad_objective are all accepted. The SDK sends the API field as bad_objective.

Python Key Management

from anticells import gaslighter

client = gaslighter.Client.from_env()

keys = client.list_api_keys()
created = client.create_api_key(name="Notebook key")
client.revoke_api_key(created["key"]["id"])

Target Registration Options

register_target mirrors the ANTICELLS target registration contract:

from anticells import gaslighter

client = gaslighter.Client.from_env()

target = client.register_target(
    url="https://target.example/chat",
    name="Production assistant",
    connection_mode="direct",
    credential="target-side-secret",
    auth={"type": "bearer", "header": "Authorization", "prefix": "Bearer"},
    skip_manifest=True,
    extra_payload={"tenant": "acme"},
    target_body_template={"query": "__TARGET_INPUT__"},
    target_body_template_configured=True,
    target_input_field="query",
    target_input_aliases=["message", "prompt"],
    upload_endpoint="/upload",
    tool_invocation_endpoint="/tools",
    file_read_endpoint="/files/read",
    upload_file_field="artifact",
    upload_message_field="note",
    upload_extra_fields={"workspace": "red-team"},
)

For reusable configuration objects:

from anticells import gaslighter

target = client.register_target_config(
    gaslighter.RegisterTarget(url="https://target.example/chat")
)
client.update_target_config(target.id, gaslighter.UpdateTarget(credential=None))

Use connection_mode="sdk_relay" for private/local targets. In relay mode, the SDK calls the target directly and the ANTICELLS service does not need direct network access to it.

For bearer auth, put only the token/JWT in credential. Use {"type": "bearer", "header": "Authorization", "prefix": "Bearer"} for Authorization: Bearer <token>.

Family Sweep

from anticells import gaslighter

batch = client.family_sweep(
    target_id=target.id,
    families=["system_prompt_extraction", "tool_abuse", "hallucination"],
    prompts_per_family=2,
    direct_phase_enabled=True,
    continue_on_child_failure=True,
    verbose=True,
)

print(batch.status)

For full personalization:

started = client.start_family_sweep_config(
    gaslighter.StartFamilySweep(
        target_id=target.id,
        persona="audit_interface",
        objective_match_mode="specified_only",
        stateful_delivery="full_history",
        max_history_turns=10,
        direct_phase_enabled=False,
        prompts_per_family=5,
        families=["system_prompt_extraction", "tool_abuse"],
        allow_weak_preflight=True,
        preflight_override_reason="Authorized audit",
        continue_on_child_failure=False,
    )
)

result = client.wait_for_batch(started.batch_id, verbose=True)

families=["all"], families=["*"], or an empty family list runs every family.

Reports

report_markdown = client.get_campaign_report(result.campaign_id, tier="growth")
saved_path = client.save_campaign_report(
    result.campaign_id,
    "reports/gaslighter-campaign.md",
    tier="growth",
)
print(saved_path)

The CLI can save reports too:

anticells gaslighter attacks run --target "$TARGET_ID" --objective "..." --trace --report-path reports/campaign.md

Notes

• verbose=None auto-enables tqdm only in interactive terminals.
• verbose=True forces progress output.
• verbose=False is suitable for CI and pipeline logs.
• X-API-Key: <key> is the default API-key style for the ANTICELLS gateway.
• Use api_key_header="Authorization" if you need Authorization: Bearer <key>.
• Use the public ANTICELLS API URL for packaged customer builds.