Protecting Groq Agents

from openai import AsyncOpenAI

class MyNewsBot:
    def __init__(self, groq_api_key: str, tavily_api_key: str,
                 model: str = "openai/gpt-oss-20b"):
        self.client = AsyncOpenAI(
            base_url="https://api.groq.com/openai/v1",
            api_key=groq_api_key,
        )
        self.tools = [{
            "type": "mcp",
            "server_url": f"https://mcp.tavily.com/mcp/?tavilyApiKey={tavily_api_key}",
            "server_label": "tavily",
            "require_approval": "never",
        }]

    async def answer_query(self, query_string: str):
        response = await self.client.responses.create(
            model=self.model, input=query_string, tools=self.tools, stream=False,
        )
        return response.output_text

from vijil_dome import Dome

class MyProtectedNewsBot:
    def __init__(self, groq_api_key: str, tavily_api_key: str):
        self.dome = Dome()
        self.news_bot = MyNewsBot(groq_api_key, tavily_api_key)
        self.input_blocked_message = "This request violates my usage guidelines."
        self.output_blocked_message = "This content violates my usage guidelines."

    async def answer_query(self, query_string: str):
        input_scan = await self.dome.async_guard_input(query_string)
        if not input_scan.is_safe():
            return self.input_blocked_message

        agent_output = await self.news_bot.answer_query(query_string)

        output_scan = await self.dome.async_guard_output(agent_output)
        if not output_scan.is_safe():
            return self.output_blocked_message

        return output_scan.response_string

# Unprotected
python -m evaluate_agent

# Protected with Dome
python -m evaluate_agent --protected=true