Tabnine Integration Guide

Overview

Tabnine provides AI-powered code completions. Cup’n’String monitors Tabnine processes and network traffic, ensuring corporate policies are enforced whether developers are using local or cloud models.

Support level

Process & Network Governance + Compatibility Adapter

What Cup’n’String detects

• Tabnine local companion processes and binaries
• Socket connections opened by the Tabnine IDE helper
• Outbound API calls to Tabnine cloud endpoints

What it governs

• Local model execution versus cloud API queries
• Workstation socket mapping to the Tabnine helper process
• Shielding of local repository paths

Recommended policies

• Force Tabnine to use approved local models where cloud usage is prohibited
• Restrict outbound network connections to verified Tabnine servers
• Shield SSH keys and secrets from Tabnine process scans

Setup outline

1. Install the Cup’n’String desktop agent.
2. Launch your IDE with the Tabnine extension active.
3. The agent detects the Tabnine helper binary and applies network bounds.

Verification

Confirm that Tabnine processes are listed as governed under the local agent status menu.

Troubleshooting

Verify the Tabnine binary path is not modified or packaged inside custom wrappers that avoid process scanning.

Known limitations

Prompt payloads are only audited where traffic routes through the compatibility adapter proxy.