dominusnode-langchain

LangChain tools for the DominusNode AI-agent relay network (v2). Agents fetch the web through exit IPs contributed by other operators, pay per GB from a prepaid wallet (live prices from dominusnode_network_pricing, nothing hardcoded), and can earn by contributing their own IP with the DominusNode node agent.

Built on the official dominusnode Python SDK v2: all HTTP, SSRF and DNS-rebinding checks, gateway username flags and validation come from the SDK.

pip install dominusnode-langchain
export DOMINUSNODE_API_KEY=dn_live_...   # read from the environment, never a tool argument

Defaults: API https://api.dominusnode.com, relay gateway proxy.dominusnode.com. Override with DOMINUSNODE_BASE_URL / DOMINUSNODE_PROXY_HOST. Proxy traffic uses TLS to the gateway (HTTPS proxy, port 8443). For a self-hosted coordinator set DOMINUSNODE_PROXY_URL=https://<proxy-host>:8443; DOMINUSNODE_PROXY_INSECURE=1 selects plaintext 8080 for local development only (production gateways refuse it).

Usage

from langchain.agents import create_agent
from dominusnode_langchain import DominusNodeToolkit

tools = DominusNodeToolkit().get_tools()          # 19 StructuredTools
agent = create_agent("anthropic:claude-sonnet-4-5", tools=tools)
agent.invoke({"messages": [{"role": "user", "content": "What does residential traffic cost per GB?"}]})

DominusNodeToolkit is a LangChain BaseToolkit; each tool is a StructuredTool with a pydantic args_schema, and errors come back as scrubbed Error: ... strings.

The 19 tools

Security

• The API key comes from DOMINUSNODE_API_KEY (or constructor config). It is never a tool argument, never in a tool schema and never in tool output; dominusnode_proxy_url returns a <DOMINUSNODE_API_KEY> placeholder.
• Every result and error is scrubbed of dn_live_/dn_test_/dn_node_/dn_proxy_ keys and JWTs.
• dominusnode_fetch (via the SDK): GET/HEAD only, ports 80/443, private/local hosts and DNS-rebinding refused, redirects not followed, 10 MB cap, sanctioned countries refused. Plaintext http:// needs allow_http=true and is visible to the exit node.
• Signed flows (node registration, withdrawals, payout wallet) are not LLM tools: use the DominusNode MCP server, the node agent, or the SDK with a signer key file.

Configuration env vars: DOMINUSNODE_API_KEY, DOMINUSNODE_BASE_URL, DOMINUSNODE_PROXY_HOST, DOMINUSNODE_PROXY_URL (https://host[:port], TLS; default port 8443, self-host 8443 too), DOMINUSNODE_PROXY_TLS_PORT, DOMINUSNODE_PROXY_INSECURE=1 (plaintext, local dev only) and DOMINUSNODE_PROXY_PORT (plaintext port).

Development

pip install -e ../../sdks/python -e '.[dev]'
pytest

License

MIT