[FEATURE]: webfetch allowed/blocked URLs

Feature hasn't been suggested before.

I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Having the ability to allow/block certain URLs from webfetch would greatly improve security when using build mode.

This issue might be a duplicate of existing issues. Please check:

[FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash #5529: [FEATURE]: Add per-agent filesystem boundaries (allow/deny paths) + optional run-as user for bash - Comprehensive feature request for per-agent access controls that includes URL/fetch restrictions
[FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders #6318: [FEATURE]: Limit tool (e.g. write, edit) permissions to specific folders - Related feature for tool-level permission restrictions

These issues discuss broader security and access control features that may encompass or relate to URL filtering for webfetch.

Feel free to ignore if your specific use case isn't fully addressed by these existing discussions.

I've taken a pass at implementing this in #8855

Not sure if there's anything else I need to do to submit it for review.

Hi folks, just want to check if there's something that is outstanding here? Would really like to get this merged as it unblocks opencode use at $WORK as our policies require strict url allow listing.

Please merge this! It's a very significant problem. We need to be able to block domains with malicious information like stackoverflow.

I've rebased this PR and fixed the tests. Would appreciate any guidance around what I can do to move this forward?

Until this feature gets added the docs are arguably misleading -- Available Permissions has this bullet:

webfetch — fetching a URL (matches the URL)

But in fact URL matching in permissions is not currently possible.

To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.

This was really disappointing. :(

Navigation Menu

Repository navigation

[FEATURE]: webfetch allowed/blocked URLs #7445

Feature hasn't been suggested before.

Describe the enhancement you want to request

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[FEATURE]: webfetch allowed/blocked URLs #7445

Description

Feature hasn't been suggested before.

Describe the enhancement you want to request

Activity

github-actions commented on Jan 9, 2026

robertfall commented on Jan 27, 2026

robertfall commented on Feb 9, 2026

romanr commented on Feb 18, 2026

robertfall commented on Mar 24, 2026

rbell-mfj commented on May 15, 2026

github-actions commented on Jul 15, 2026

robertfall commented on Jul 15, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions