Interface: EgressPolicy

Defined in: safe-fetch.ts:8

Default-deny egress policy (ADR-0010). All outbound HTTP from tools should pass through safeFetch / checkEgress so a model-supplied or redirected URL cannot reach internal infrastructure (SSRF).

#Properties

#allowedHosts?

optional allowedHosts?: string[]

Defined in: safe-fetch.ts:19

Literal hostname allowlist. If set, every request (and redirect hop) must match exactly — overrides allowPrivateHosts. Wildcards unsupported by design.

#allowPrivateHosts?

optional allowPrivateHosts?: boolean

Defined in: safe-fetch.ts:14

Allow requests to private / loopback / link-local addresses. Off by default so an agent can't reach AWS IMDS (169.254.169.254), the loopback interface, or RFC1918 services. Enable only for vetted internal targets.

#maxRedirects?

optional maxRedirects?: number

Defined in: safe-fetch.ts:21

Max redirects to follow; each hop is re-gated. Default 3.