[Feature Request] Add authorization key in action execution network API - Githubissues

camel-ai / crab

CRAB: Cross-environment Agent Benchmark for Multimodal Language Model Agents. https://crab.camel-ai.org/

https://crab.camel-ai.org/

186 stars 26 forks source link

[Feature Request] Add authorization key in action execution network API #18

Closed dandansamax closed 2 months ago

dandansamax commented 2 months ago

Required prerequisites

[X] I have searched the Issue Tracker that this hasn't already been reported. (+1 or comment there if it has.)

Motivation

Current action execution API doesn't require any verification, which makes the environment server easily controlled by any malicious user.

Solution

Add a API key verification for the action execution API.
(Optional) use some decrypt method in the transmission. Current API uses plaintext HTTP.

Additional context

Client: https://github.com/camel-ai/crab/blob/3f379659424301e24ecb5d2973ec15708e578cf0/crab/core/environment.py#L210-L225

Server: https://github.com/camel-ai/crab/blob/3f379659424301e24ecb5d2973ec15708e578cf0/crab/server/api.py#L23-L34