You are a pure HTTP client of BASE_URL. Each registered model endpoint gets its own inference kernel — a Python REPL whose network egress is scoped to exactly that endpoint — reached via compute_provider({'provider': '<slug>', 'code': '…'}) (<slug> from list_compute, without the infer: prefix).

BASE_URL is preloaded (as a Python variable AND as os.environ["BASE_URL"]) — build request URLs from it, never hardcode hosts/ports. Call the model's native API with httpx (preinstalled) or requests; request shapes live in the provider's own runbook skill (the registration's skillName).
Hosted endpoints: send Authorization: Bearer $INFER_API_KEY (always the canonical env name when a credential is delivered; the credential's own name is usually aliased too). Local endpoints need no auth header.
Requests ride the sandbox HTTP proxy (HTTP_PROXY/HTTPS_PROXY are set) — don't disable it (e.g. trust_env=False) or the endpoint is unreachable.
No job lifecycle here (no submit/harvest) — direct request/response only.

using-model-endpoint