One address.
One port.

What the CLI connects to

The CLI opens no listening port, accepts no inbound connections, runs no background service and calls no other host. What a request contains is described in What leaves your computer: your text and a small pack of names and commands, never file contents.

Install, sign-in and payment

Outside the CLI, these are used in the browser or by npm:

Sign-in codes arrive by email from an address at v8labs.app; if your mail filter holds them, allow that domain.

For IT: allowlisting

• Allow v8labs.app and, for teams, console.v8labs.app, outbound HTTPS on TCP 443, in your DNS filter, web filter or firewall.
• Allow by hostname, not by IP address: the address can change.
• The site is a developer tool: a command-line program for the coding agents Claude Code and Codex. A young domain is sometimes put in a category such as "newly registered" or "unrated", which many policies block by default.
• Nothing needs to be installed on the network side, and no inbound rule is needed.

TLS inspection and proxies

TLS inspection. The CLI runs on Node.js, which does not use the Windows or macOS certificate store by default. If your network re-signs HTTPS traffic, either exempt v8labs.app from inspection, or point Node.js at your company's root certificate (a PEM file) before starting the agent:

export NODE_EXTRA_CA_CERTS=/path/to/company-root.pem      # macOS, Linux
setx NODE_EXTRA_CA_CERTS "C:\path\to\company-root.pem"    # Windows, then open a new terminal

Proxies. v8 has no proxy setting of its own yet: it connects to v8labs.app directly. If your network only allows the web through a proxy, the reliable route is a direct allow rule for v8labs.app:443. Recent Node.js versions can send their built-in requests through the proxy named in HTTPS_PROXY when NODE_USE_ENV_PROXY=1 is set (see your Node.js version's documentation); we have not tested v8 this way and do not support it yet.

What a block looks like

In the terminal, the shortcut ends with:

Can't reach v8. Check your connection. Your prompt is unchanged.

A DNS filter answers for v8labs.app with the address of its own block page. That page cannot prove it is v8labs.app, so the secure connection fails, or it redirects, which v8 refuses. Either way v8 reports that it can't reach the service and leaves your text alone. Where your network's inspection certificate is trusted, the filter's block page can reach the CLI instead, and you see "Something went wrong." v8-prompt status shows the same messages.

In the browser, instead of v8labs.app you get a page from your network's security product saying the site is blocked, often with the category it was put in, or a certificate warning.

Check it yourself

nslookup v8labs.app            # the answer from your network's DNS
nslookup v8labs.app 8.8.8.8    # the answer from a public DNS resolver
curl -sS https://v8labs.app/api/health      # macOS, Linux
curl.exe -sS https://v8labs.app/api/health  # Windows

• If the two nslookup answers give different addresses, a DNS filter is answering for v8labs.app. (If the second one times out, your network only allows its own DNS.)
• A working connection answers the health check with a short line that starts with {"ok":true. A block page, a certificate error or a timeout means the path to v8labs.app is blocked.
• If v8 works on another network, the block is on this one.

What to send your IT team

Copy this, add the category your filter shows, and send it to your IT or security team:

Please allow v8labs.app and console.v8labs.app (outbound HTTPS, TCP 443).
It is v8 Hone Advanced Prompt, a command-line tool for the coding agents
Claude Code and Codex. It turns a typed request into a structured prompt.
It sends the request text and a small pack of repository names and
commands, never file contents, only when the user presses its key.
Our filter currently blocks it as: [category]
Details: https://v8labs.app/docs/privacy
Network requirements: https://v8labs.app/docs/corporate-networks
Security: https://v8labs.app/security

If a filter puts v8labs.app in a category that does not fit, please also tell us at support@v8labs.app with the product name and the category, so we can ask its vendor to review it.