Skip to main content
By default, ZeroCode blocks internet access during the agent phase. Setup scripts still run with internet access so you can install dependencies. You can enable agent internet access per environment when you need it.

​
Risks of agent internet access

Enabling agent internet access increases security risk, including:
  • Prompt injection from untrusted web content
  • Exfiltration of code or secrets
  • Downloading malware or vulnerable dependencies
  • Pulling in content with license restrictions
To reduce risk, allow only the domains and HTTP methods you need, and review the agent output and work log. Prompt injection can happen when the agent retrieves and follows instructions from untrusted content (for example, a web page or dependency README). For example, you might ask ZeroCode to fix a GitHub issue:
The issue description might contain hidden instructions:
If the agent follows those instructions, it could leak the last commit message to an attacker-controlled server: Prompt injection leak example This example shows how prompt injection can expose sensitive data or lead to unsafe changes. Point ZeroCode only to trusted resources and keep internet access as limited as possible.

​
Configuring agent internet access

Agent internet access is configured on a per-environment basis.
  • Off: Completely blocks internet access.
  • On: Allows internet access, which you can restrict with a domain allowlist and allowed HTTP methods.

​
Domain allowlist

You can choose from a preset allowlist:
  • None: Use an empty allowlist and specify domains from scratch.
  • Common dependencies: Use a preset allowlist of domains commonly used for downloading and building dependencies. See the list in Common dependencies.
  • All (unrestricted): Allow all domains.
When you select None or Common dependencies, you can add additional domains to the allowlist.

​
Allowed HTTP methods

For extra protection, restrict network requests to GET, HEAD, and OPTIONS. Requests using other methods (POST, PUT, PATCH, DELETE, and others) are blocked.

​
Preset domain lists

Finding the right domains can take some trial and error. Presets help you start with a known-good list, then narrow it down as needed.

​
Common dependencies

This allowlist includes popular domains for source control, package management, and other dependencies often required for development. We will keep it up to date based on feedback and as the tooling ecosystem evolves.
Last modified on August 30, 2026