# Restrict agent fetches to hosts you trust

> Fetch tools that follow links are an SSRF and data-exfiltration risk in production. LLMsTxtTools now takes an allowed_hosts parameter that closes that surface: an agent only fetches from hosts you…

- Published: 2026-05-06
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/restrict-agent-fetches-to-hosts-you-trust
- Markdown: https://agno-com-nine.vercel.app/articles/restrict-agent-fetches-to-hosts-you-trust.md

Fetch tools that follow links are an SSRF and data-exfiltration risk in production. `LLMsTxtTools` now takes an `allowed_hosts` parameter that closes that surface: an agent only fetches from hosts you explicitly trust, and requests to anything outside the list are rejected, so agents can use `llms.txt` indexes without being able to reach arbitrary URLs.