web_fetch_tool
Fetch the main text content from any public web page URL. Avoids SSRF attacks and caps output size.
Instructions
Fetch a web page by URL and return its main text content.
SSRF-hardened (scheme allow-list, private-IP block, per-redirect re-validation, size cap).
Output is sanitized, role-marker stripped, and wrapped in <untrusted>…</untrusted> before
it can reach a model — safe for agent consumption with explicit untrusted marking.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Public http(s) URL to fetch. Private IPs, localhost, and non-http schemes are rejected (SSRF guard). Example: https://example.com/docs/guide | |
| max_chars | No | Maximum characters of extracted main text to return (default 20000). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |