AxMCPSSRFProtectionOptions
Defined in: https://github.com/ax-llm/ax/blob/5b28f9093bb70863b59459bb6df5062d005bce41/src/ax/mcp/util/ssrf.ts#L10
Properties
| Property | Type | Description |
|---|---|---|
allowedHosts? | readonly string[] | Exact hostnames that should bypass host classification checks. |
allowHTTP? | boolean | Allow plain HTTP. HTTPS is required by default. |
allowLoopback? | boolean | Allow loopback hosts such as localhost, 127.0.0.1, and ::1. |
allowPrivateNetwork? | boolean | Allow private, link-local, and otherwise reserved IP literal hosts. |
disabled? | boolean | Disable URL validation. Intended only for controlled development and test environments. |
validateURL? | (url: URL, context: AxMCPSSRFProtectionContext) => void | Promise<void> | Optional application-specific validator. Throw to reject the URL. Use this for DNS pinning or deployment-specific egress policy. |