Safe Colab CLI

Enable AI agents to analyze your sensitive data remotely — without ever copying it.

A command-line tool that launches a sandboxed Python environment on your machine (or in the cloud), registers it as a remote service via Hypha, and lets AI agents execute code through a guardian agent that enforces your sensitivity policy.

Key Features

• Guardian Agent — LLM-powered security checks validate code before execution and output before return
• Sensitivity Contract — Define protected columns, minimum aggregation, and allowed operations in a README.md
• Live Dashboard — Web dashboard with real-time activity log and operation stats
• Protected Audit Logs — Full audit trail in ~/.safe-colab/logs/, protected from sandboxed code
• Sandbox Isolation — nono (macOS/Linux) or Docker restricts kernel filesystem access
• Remote Hosting — Upload dataset once, cloud pods spin up on demand (no laptop needed)
• Zero Config for Agents — Agents call get_skill_md via curl to learn the API. No SDK, no token needed.

Quick Start

Local Mode (data stays on your machine)

pip install safe-colab
safe-colab login --server-url https://hypha.amun.ai
safe-colab start --data-dir ./my-data --guardian-url https://guard.amun.ai

Remote Mode (upload once, pods on demand)

pip install safe-colab
safe-colab login --server-url https://hypha.amun.ai
safe-colab deploy --data-dir ./my-data --guardian-url https://guard.amun.ai
# → Uploads dataset, registers app. Share the App ID with your AI agent.
# → Pods spin up automatically when an agent calls start().

Use the Amun AI production servers

Safe Colab talks to two services and both must point at the Amun AI deployment (older installs and some docs default to an aicell.io instance):

The Hypha server is fixed at login time — if you logged in against a different server, re-run safe-colab login --server-url https://hypha.amun.ai to overwrite the saved credentials in ~/.safe-colab/.env. You can also set both via environment (persist them in your shell profile):

export HYPHA_SERVER_URL=https://hypha.amun.ai
export SAFE_COLAB_GUARDIAN_URL=https://guard.amun.ai

Verify the guardian before a session or demo (accepts the Terms of Use, then runs a built-in safe/blocked suite):

safe-colab test-guardian --url https://guard.amun.ai --accept-terms
# → Health: OK … 4/4 tests passed

Documentation

See the docs site or the GitHub project for full documentation.

License

Copyright 2024-2026 Amun AI AB. All rights reserved.

This software is proprietary and confidential. No part of this software may be reproduced, distributed, or transmitted in any form or by any means without the prior written permission of Amun AI AB. Unauthorized copying, modification, distribution, or use of this software is strictly prohibited.