Skip to content

About

Secure setup guidance for GMAO SI agent clients

Resources

Security policy

Stars

1 star

Watchers

0 watching

Forks

Latest commit

 

History

35 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 

Repository files navigation

SI Agent Setup for GMAO

Private, credential-safe guidance for using coding-agent clients and Visual Studio Code with GMAO SI services.

Start here

  1. Read Security before configuring a client.
  2. Confirm that your intended data and repository are approved for the service.
  3. Select only the service you are authorized to use.
  4. Follow its client-specific instructions. Do not install a configuration for the other service.
  5. Obtain service access and configuration values through the approved GMAO channel. Do not request or add credentials in GitHub issues, pull requests, or chat.

NAS restriction

SI agent harnesses, including the clients documented in this repository, are not allowed on NASA Advanced Supercomputing (NAS) systems. Do not install or configure them there.

Services

OpenCode and Visual Studio Code are the SI Team's primary clients for these services. The presence of a guide or template does not change the service or system restrictions above.

NASA Chat

First get a NASA Chat API key. Start with OpenCode or Visual Studio Code; CLI alternatives are Claude Code and Codex.

Mission AI

Start with OpenCode or Visual Studio Code. If you do not already have a Mission AI API key, contact the SI Team for more information. Codex and Claude Code are unvalidated trials: confirm the required gateway interface with the service owner before using them.

Client versions and credentials

  • OpenCode: these guides and templates support V2 only, matching the SI-supported machines. Check opencode --version before configuring it. Discover users should load the provided module.
  • Credentials: follow Security. V2 OpenCode templates use NASA_CHAT_API_KEY or NASA_MISSION_AI_API_KEY environment references as shipped; the guides explain the approved /connect alternative. VS Code uses its local secret storage. Signing into GitHub with gh does not authenticate either NASA service.
  • Models: the OpenCode V2 templates are the reference inventory for these examples, not a guarantee of service availability or approval. Client API support differs, so the VS Code templates intentionally contain a subset. Service owners remain authoritative.
  • Model labels: capability and relative cost labels are approximate guides based on GitHub's model categories and reference prices, not NASA gateway rates. NASA Chat uses token-based billing, while Mission AI has its own pricing and overhead. Actual usage depends on input, output, caching, and context length; confirm service-specific rates with the service owner. Models without a comparable reference are left unlabeled.

Scope

This repository provides client configuration patterns and redacted templates. It does not contain API keys, tokens, certificates, private keys, or prompt and source data.

The NASA Chat and Mission AI endpoint and model information here is for GMAO users of the approved NASA services. It is not for public distribution. Service owners remain authoritative for access, models, data handling, and network policy.

Templates

Client NASA Chat Mission AI
OpenCode V2 Template Template
VS Code Template Template
Claude Code Template Unvalidated trial
Codex Template Unvalidated trial

Merge a template into the client configuration location documented in its guide; do not overwrite unrelated settings. The .example suffix is for this repository, not the installed filename. Keep credentials in the approved local secret store or environment; never put a secret in the copied configuration.

The OpenCode templates block the built-in opencode, azure, and amazon-bedrock providers. This is a blocklist, not a NASA-only allowlist or a filter by model origin. Other configured providers can remain available. Use only approved models, including any models offered through enterprise GitHub Copilot.

References

About

Secure setup guidance for GMAO SI agent clients

Resources

Security policy

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors