Allow exact destinations, not “the internet”
[network].allowed_hosts makes outbound network intent visible and reviewable. The [network] table is required even when the list is empty, denies everything not listed,
and never grants access by itself.
Prefer an empty list
[network]
allowed_hosts = []If every Action works from its inputs and Controller-injected context, the Assistant does not need an external host.
Write only the public DNS hostname
[network]
allowed_hosts = ["api.cloudflare.com"]Do not include https://, a port, path, query, fragment, wildcard, or trailing slash. A second API
hostname is a second explicit list item. An Assistant has no network route of its own: every Action reaches these
hosts only through Team with await ctx.fetch(...), over HTTPS on port 443, and Team's egress policy
admits only the hosts listed here.
Every entry must be exact and public
- Lowercase DNS hostname only, at most 253 characters.
- At most 32 unique hosts per Assistant.
- No IP addresses, single-label names, wildcards, URLs, or localhost.
- No reserved internal or test suffixes such as
.local,.internal, or.test. - Team follows no redirect; a call to the redirect target must name a declared host.
- A call carries at most a 256 KiB body and receives at most a 4 MiB response, and an Action makes at most sixteen calls per invocation.
- An Integration-backed API host, such as
api.cloudflare.com, must still appear in this list.