Struct WebFetchConfig 

pub struct WebFetchConfig {
    pub enabled: bool,
    pub allowed_domains: Vec<String>,
    pub blocked_domains: Vec<String>,
    pub allowed_private_hosts: Vec<String>,
    pub max_response_size: usize,
    pub timeout_secs: u64,
    pub firecrawl: FirecrawlConfig,
}

Web fetch tool configuration ([web_fetch] section).

Fetches web pages and converts HTML to plain text for LLM consumption. Domain filtering: allowed_domains controls which hosts are reachable (use ["*"] for all public hosts). blocked_domains takes priority over allowed_domains. If allowed_domains is empty, all requests are rejected (deny-by-default). Same-host redirects are followed; cross-host redirects are rejected so the validated DNS answers remain pinned to the request transport.

Fields

enabled: bool

Enable web_fetch tool for fetching web page content

allowed_domains: Vec<String>

Allowed domains for web fetch (exact or subdomain match; ["*"] = all public hosts)

blocked_domains: Vec<String>

Blocked domains (exact or subdomain match; always takes priority over allowed_domains)

allowed_private_hosts: Vec<String>

Private/internal hosts allowed to relax the public-address SSRF check (e.g. ["192.168.1.10", "internal.local"]). Exact and subdomain matches are supported. Every target still resolves locally, and known cloud metadata/platform addresses remain blocked. A literal private/local host (IP literal, localhost, .local) listed here also bypasses allowed_domains. The * wildcard permits any literal private/local host and lets a name already in allowed_domains resolve to a private IP, but it does NOT widen allowed_domains — a non-private host (matched explicitly or via *) still needs allowed_domains, so * cannot reach an arbitrary public host. The standard web_fetch request requires direct transport for DNS pinning: environment proxy discovery is disabled, and an enabled environment scope or runtime proxy applying to the tool is rejected. A process environment proxy outside that managed scope is warned and ignored for the standard request. The optional Firecrawl API fallback uses normal environment proxy discovery because that separate API request has no locally validated DNS pin. Use proxy.scope = "services" without tool.* to proxy other traffic.

max_response_size: usize

Maximum response size in bytes (default: 500KB, plain text is much smaller than raw HTML)

timeout_secs: u64

Request timeout in seconds (default: 30)

firecrawl: FirecrawlConfig

Firecrawl fallback configuration ([web_fetch.firecrawl])

Implementations

impl WebFetchConfig

pub fn configurable_prefix() -> &'static str

Returns the #[prefix] value for this Configurable struct.

pub fn init_requires_explicit_config() -> bool

True when this struct has a required leaf field that a bare/ancestor-prefix init_defaults scaffold must not materialize (it would fill the field with its Rust Default, which prune_empty_leaves then strips on save, leaving a partial sub-table that fails strict reload). Explicitly targeting this section (or a descendant of it) still scaffolds regardless of this flag, so the section can be materialized for the operator to fill in.

pub fn secret_fields(&self) -> Vec<SecretFieldInfo>

Returns metadata about all #[secret] fields on this struct and nested children.

pub fn secret_field_terminals() -> Vec<&'static str>

pub fn encrypt_secrets(&mut self, store: &SecretStore) -> Result<()>

Encrypt all secret fields in place using the provided store.

pub fn decrypt_secrets(&mut self, store: &SecretStore) -> Result<()>

Decrypt all secret fields in place using the provided store.

pub fn set_secret(&mut self, name: &str, value: String) -> Result<()>

Set a secret field by its full dotted name, dispatching to nested children.

pub fn prop_fields(&self) -> Vec<PropFieldInfo>

Returns metadata about all property fields on this struct and nested children.

pub fn get_prop(&self, name: &str) -> Result<String>

Get a property value by its full dotted name, returning it as a display string.

pub fn set_prop(&mut self, name: &str, value_str: &str) -> Result<()>

Set a property value by its full dotted name, parsing from string.

pub fn prop_is_secret(name: &str) -> bool

Check if a property name refers to a secret field (static, no instance needed).

pub fn init_defaults(&mut self, prefix: Option<&str>) -> Vec<&'static str>

Instantiate None nested sections whose prefix matches. Returns the prefixes that were initialized.

pub fn map_key_sections() -> Vec<MapKeySection>

Enumerate every map-keyed (HashMap<String, T>) and list-shaped (Vec<T>) section discoverable from this Configurable’s tree. The dashboard / CLI consume this to surface “+ Add” affordances without hardcoding the section list.

pub fn nested_section_help(name: &str) -> Option<&'static str>

Help blurb for a #[nested] field on this struct, sourced from the field-level /// docstring. Returns None for unknown names so callers can fall through to a different lookup.

pub fn nested_section_group(name: &str) -> Option<&'static str>

pub fn get_map_keys(&self, section_path: &str) -> Option<Vec<String>>

Return the current alias keys at section_path, or None if the path doesn’t resolve to a map-keyed section in this tree.

pub fn nested_option_entries(&self) -> Vec<NestedOptionEntry>

pub fn create_map_key( &mut self, section_path: &str, map_key: &str, ) -> Result<bool, String>

pub fn delete_map_key( &mut self, section_path: &str, map_key: &str, ) -> Result<bool, String>

pub fn rename_map_key( &mut self, section_path: &str, map_key: &str, new_key: &str, ) -> Result<bool, String>

Trait Implementations

impl Clone for WebFetchConfig

fn clone(&self) -> WebFetchConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WebFetchConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WebFetchConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for WebFetchConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for WebFetchConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl MaskSecrets for WebFetchConfig

fn mask_secrets(&mut self)

fn restore_secrets_from(&mut self, current: &Self)

impl Serialize for WebFetchConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.