Skip to content

Allow option to restore web_fetch access to private networks #3731

Description

@Malcolmnixon

Describe the feature or problem you'd like to solve

We have placed numerous agentic files (templates and standards) on our corporate network, and now with 1.0.60 the agents are blocked from reading them, causing our agents to start failing.

Proposed solution

If there's a compelling security-reason to blanket-block all corporate networks, then perhaps at least allow users to white-list specific addresses.

Example prompts or workflows

Possibly a prompt such as: /allow-ip <10.1.2.3>

Additional context

My company does 62304 medical device development; and to that end we have an internal read-only website hosting useful information:

  • A template repository with files consisting of placeholders and agentic prompts to populate. The agents are instructed to use files from the template when making new files (for consistent file formatting)
  • A library of standards in versioned directories. The agents are instructed to read the appropriate standards when performing certain types of work

It's on an internal web-site so both humans and agents can read the files and refer to sections; so developing an MCP-server front-end would disrupt the smooth flow and citation references that happen in copilot prompts; and publishing internal company standards on a public website is inappropriate.

Activity

  1. added
    area:networkingProxy, SSL/TLS, certificates, corporate environments, and connectivity issues
    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions
    and removed on Jun 9, 2026
  2. im-aIex commented on Jun 23, 2026

    @im-aIex

    +1

    not being able to access internal documentation sites is a blocker for upgrading beyond 1.0.59. there are other security mechanisms that can be in place (especially via SDK) that removes any risk this would be protecting against.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:networkingProxy, SSL/TLS, certificates, corporate environments, and connectivity issuesarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions