Execution Proxy
The governed HTTP and MCP proxy that executes allowed actions.
HTTP proxy
- SSRF protection — blocks private IPs, localhost, link-local
- Rejects URLs with embedded credentials
- 30-second timeout, 1 MB body cap
- Returns status, headers, body (truncated if large)
MCP proxy
- JSON-RPC over HTTP/SSE (protocol 2024-11-05)
- Resolves server by slug or UUID from workspace registry
- Never accepts upstream URLs in request bodies
- Supports tools/list and tools/call operations
Execution proxy required
When workspace setting require_execution_proxy is enabled, evaluate-only requests that include tool or resource fields return execution_proxy_required (403). Use /runtime/execute instead.