web_read

Fetches a public page and returns its text.

Since 2 Sept 2026

Checks every address, including redirects. Private and local addresses are refused. Credentials in the URL are refused. Text is cut to 8,000 characters. Suspicious text gets a banner.

Tool name: web_read
Group: Web
Risk: low
Needs approval: never
Approval rule: No approval. The SSRF guard blocks non-public addresses.
Allowed in scheduled jobs: No
Default: on

Parameters

Name	Type	Required	Default	Meaning	Limits
url	string	Yes		A public http or https address.	Only public addresses. The page text is cut to 8,000 characters.

Returns

Page text.

Example (made up for this page)

Call

{
  "url": "demo"
}

Result

Example Domain. This domain is for use in examples.

Side effects

Makes an outbound request.

How it can fail

When	What the agent sees
Private address	A refusal naming the reason
Non-http scheme	Refused
Timeout	An error text