F5 AI Security (CalypsoAI) Integration

​

What is F5 AI Security (CalypsoAI)?

​

Key capabilities

1. Prompt and response scanning — Evaluates both inputs to the model and outputs from the model through F5 AI Security scanners.
2. Prompt injection and jailbreak detection — Flags adversarial inputs designed to override system instructions or bypass model constraints.
3. PII and policy violations — Detects personally identifiable information and other policy breaches configured in your F5 project.
4. Project-scoped scanners — Scanner coverage depends on the API token you provide. A project token runs the scanners enabled on that project; a global token uses globally available scanners. Configure scanners in F5 AI Security — see Getting started with AI Guardrails.

​

Adding F5 AI Security to TrueFoundry

1

Pick CalypsoAI (F5 AI Security) from the guardrail registry

From AI Gateway → Guardrails → Registry, select CalypsoAI (F5 AI Security) under External Providers. See Get started with guardrails for the end-to-end flow of adding any guardrail.

2

Generate an API key in F5 AI Security

Create an API token in the F5 AI Security / CalypsoAI console. Prefer a project-scoped token so only the scanners enabled on that project run for each scan. Keep the key secure — it grants access to your F5 AI Security scan API.

3

Fill in the CalypsoAI (F5 AI Security) form

Provide the following fields:

Field	Required	Description
Name	✅	Identifier for this guardrail (for example, f5-ai-security). Used when you reference the guardrail from rules.
Description		Free-form description shown in the dashboard.
CalypsoAI API Key Auth → API Key	✅	F5 AI Security / CalypsoAI API token. Stored encrypted. The AI Gateway attaches it on every scan call.
Operation	✅	Validate inspects and can block without modifying content (runs in parallel with other validate guardrails). Mutate can validate and also rewrite content — for example, forwarding a redactedInput for PII (runs sequentially by priority).
Priority		Optional execution order for mutate guardrails. Lower values run first.

Keep the CalypsoAI API key in TrueFoundry only — it should never appear in client code or model request bodies.

Use Validate when you only need to block unsafe prompts or completions. Use Mutate when F5 scanners are configured to redact (for example, PII) and you want the AI Gateway to continue with the redacted content instead of blocking.

4

Bind the guardrail to models with a rule

Once the guardrail is saved, attach it to one or more models through a Guardrail Rule. Use llm_input_guardrails to scan prompts before they reach the model and llm_output_guardrails to scan completions before they’re returned to the caller.For a step-by-step walkthrough, see Getting Started. For the full policy reference, see Guardrails Configuration.

​

Validation logic

• If CalypsoAI returns a blocked outcome (for example, outcome: blocked), the AI Gateway blocks the request and returns a 400 error to the caller — subject to your Enforcing Strategy.
• If scanners clear the content, the request is allowed to proceed. In Mutate mode, any redacted content returned by CalypsoAI can replace the original prompt or completion before the next step.
• If the scan API call fails (timeout, 5xx, auth error), behavior follows your Enforcing Strategy:
  • Enforce — fail closed; the request is blocked.
  • Enforce But Ignore On Error — fail open; the request proceeds and the failure is logged.
  • Audit — never block; violations and errors are logged only.

​

Example blocked request

Input Guardrail checks failed for integrations: [my-group/f5-ai-security]
- Details: CalypsoAI (F5 AI Security) policy violation
  (outcome: blocked; scanners: <scanner-id-1>, <scanner-id-2>)

​

Example scan findings

{
  "is_blocked": true,
  "results": [
    {
      "category": "prompt_injection",
      "engine": "calypsoai",
      "message": "Prompt injection detected",
      "scanner_id": "019514eb-a704-7025-b7b2-eb1333853e8b",
      "score": 0.99
    },
    {
      "category": "jailbreak",
      "engine": "calypsoai",
      "message": "Potential jailbreak attempt",
      "scanner_id": "019620d5-12a6-702f-8660-cb0d069cb054",
      "score": 0.95
    }
  ]
}

​

Supported detections

​

Reference

• F5 AI Security API — Getting started with AI Guardrails
• About the AI Security API
• TrueFoundry guardrails overview
• Get started with guardrails
• Configure guardrail policies