SSRF & Private IP Protection
Network-level protections for HTTP and MCP proxies.
- HTTP proxy blocks private IPs, localhost, and link-local addresses
- MCP transport URLs must resolve to public addresses
- URLs with embedded credentials are rejected
- 30-second timeout and 1 MB body cap on HTTP proxy