# Restrict what your knowledge readers can fetch

> URL-fetching knowledge readers now take an allowed_hosts parameter, so a reader pulls only from hosts you trust and rejects everything else.

- Published: 2026-05-15
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/restrict-what-your-knowledge-readers-can-fetch
- Markdown: https://agno-com-nine.vercel.app/articles/restrict-what-your-knowledge-readers-can-fetch.md

URL-fetching knowledge readers now take an `allowed_hosts` parameter, so a reader pulls only from hosts you trust and rejects everything else. This closes the same SSRF and data-exfiltration surface during knowledge ingestion that any link-following fetcher opens in production.

See [cookbook](https://github.com/agno-agi/agno/blob/main/cookbook/07_knowledge/03_production/05_ssrf_allowed_hosts.py) for more reference.