# Personal sandboxed wrapper around the unmodified agy CLI – remaining questions (separate sign-in, CONNECT proxy, research)

**URL:** <https://discuss.ai.google.dev/t/personal-sandboxed-wrapper-around-the-unmodified-agy-cli-remaining-questions-separate-sign-in-connect-proxy-research/187827>\
**Category:** Google Antigravity\
**Tags:** gemini-cli\
**Created:** [October 9, 2026, 12:25pm UTC](https://discuss.ai.google.dev/t/personal-sandboxed-wrapper-around-the-unmodified-agy-cli-remaining-questions-separate-sign-in-connect-proxy-research/187827 "2026-10-09T12:25:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mkorun](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/mkorun/32/149086_2.png) [@mkorun](https://discuss.ai.google.dev/u/mkorun)\
**Post date:** [October 9, 2026, 12:25pm UTC](https://discuss.ai.google.dev/t/personal-sandboxed-wrapper-around-the-unmodified-agy-cli-remaining-questions-separate-sign-in-connect-proxy-research/187827/1 "2026-10-09T12:25:46Z")

</div>

Hi, I’d like to make sure my setup stays within the Terms. I read the staff answers in [Can a local AI coordinator launch the official Antigravity CLI with subscription sign-in?](https://discuss.ai.google.dev/t/186246) and [Is invoking the official `agy` CLI from a local AI coding assistant allowed on an individual Google AI account?](https://discuss.ai.google.dev/t/185992), and I think my setup matches them, but a few details are not covered there.

**My setup**

1. A small orchestration tool that I wrote myself and run only on my own machine, for my own work, starts the **unmodified official `agy` binary** headless (`agy -p --output-format stream-json`) as a child process. I am the only user, on my own consumer plan. One task at a time, no unattended high-frequency loops, no account rotation, no shared access.
2. `agy` runs inside a local sandbox with its own `HOME`. In that `HOME` it holds **its own sign-in of my same Google account** , done interactively in `agy` itself and stored by `agy`. My tool never reads, copies or uses the OAuth token; only `agy` uses it.
3. Network access goes through a local **HTTPS CONNECT proxy** (`HTTPS_PROXY`). The proxy only allows Google’s hosts and never decrypts TLS, so it never sees the token or the content.

**Questions**

1. The FAQ says: “Wrapping agy inside third-party coding agents or applications … is not supported under consumer plans.” The staff answer in /t/186246 says a local coordinator starting the unmodified `agy` is fine under the listed conditions. Is the staff answer the official reading, so that my setup is supported?
2. Does “third party software” in the Terms include a tool I wrote myself for my own personal use?
3. Is a second sign-in of the same account for the sandboxed `agy` fine, or should it use my existing sign-in?
4. Is a local CONNECT proxy that only allows Google’s hosts and never decrypts traffic fine?
5. May such a run use `agy`’s web search and YouTube abilities for research tasks?

Thank you!

---

<div class="post-metadata">

**Author:** ![Ambati\_Rajendra](https://d1dlmcr85iqnpo.cloudfront.net/user_avatar/discuss.ai.google.dev/ambati_rajendra/32/31584_2.png) [@Ambati\_Rajendra](https://discuss.ai.google.dev/u/Ambati_Rajendra)\
**Post date:** [October 14, 2026, 12:19pm UTC](https://discuss.ai.google.dev/t/personal-sandboxed-wrapper-around-the-unmodified-agy-cli-remaining-questions-separate-sign-in-connect-proxy-research/187827/2 "2026-10-14T12:19:03Z")

</div>

Hi @mkorun,

Could you please share a few details:

- The Antigravity version you are using?
- The operating system you are using?
- If possible, could you please provide a reproduction steps or screen recording to reproduce this issue?