Agent can't reach the model API

Demo content. This page is a template placeholder - the real Levee documentation will replace it.

Symptom

The tool errors with connection refused or timeout when calling the model API, even though it works outside Levee.

Cause

The destination isn't in the policy's network.allow list, so the default-deny rule blocks it.

Fix

1. Confirm the block:

   levee net check api.anthropic.com:443
   # DENY (rule: default deny)
   

2. Add the host to your policy and re-apply:

   network:
     allow:
       - "api.anthropic.com:443"
   

   levee policy apply ./default.policy.yaml
   

3. Re-run. levee net check should now report ALLOW.