← Developers

Scope templates

Vendor-documented hostnames for model providers, tool hosts and MCP servers. Import the ones in use, then hold everything else.

Templates contain only vendor-documented hostnames. Last verified September 2026.

OpenAI runtime

  • api.openai.com

Add regional or batch hostnames only if your account uses them.

Anthropic runtime

  • api.anthropic.com

One host. Add your gateway if you front the API.

Azure OpenAI

  • <resource>.openai.azure.com
  • login.microsoftonline.com

Replace <resource> with your deployment. The auth host is required for Entra tokens.

AWS Bedrock

  • bedrock-runtime.<region>.amazonaws.com
  • bedrock.<region>.amazonaws.com
  • sts.<region>.amazonaws.com

Per region. Add S3 hosts only if your agent reads or writes objects.

Google Vertex and Gemini

  • aiplatform.googleapis.com
  • generativelanguage.googleapis.com
  • oauth2.googleapis.com

Regional Vertex endpoints follow <region>-aiplatform.googleapis.com.

LangSmith tracing

  • api.smith.langchain.com

Required only when tracing is enabled.

Web search and browsing tools

  • google.serper.dev
  • api.tavily.com
  • api.exa.ai
  • api.firecrawl.dev

Import only the tools in use. Result pages fetched by a search tool are arbitrary destinations and are subject to the Greywall.

MCP: GitHub

  • api.githubcopilot.com
  • api.github.com
  • github.com

The hosted GitHub MCP server plus the REST API it calls.

MCP: Slack

  • slack.com
  • api.slack.com

Approve on the MCP host policy rather than on each agent policy.

MCP: Google Workspace

  • gmail.googleapis.com
  • www.googleapis.com
  • oauth2.googleapis.com

Gmail, Drive and Calendar share the googleapis.com host family.

Package registries (build policies)

  • pypi.org
  • files.pythonhosted.org
  • registry.npmjs.org
  • crates.io
  • static.crates.io
  • repo.maven.apache.org

For CI runners and build agents only. Runtime policies should not include these.

Import a template

Templates are imported as list entries with a source_ref naming the template, so the change log records the origin of each host.

import.sh 
# Import a template as entries on your allow list (JWT)
for h in api.openai.com api.smith.langchain.com; do
  curl -s https://control.securd.com/api/v1/gateway/list-entries/$ALLOW_LIST_UUID/entries \
    -H "Authorization: Bearer $TOKEN" -H "X-Tenant-UUID: $TENANT" \
    -H "Content-Type: application/json" \
    -d "{ \"value\": \"$h\", \"source\": \"manual\", \"source_ref\": \"template:openai-runtime\" }"
done
import-bulk.sh 
# Or one bulk call
curl -s https://control.securd.com/api/v1/gateway/list-entries/$ALLOW_LIST_UUID/entries/bulk \
  -H "Authorization: Bearer $TOKEN" -H "X-Tenant-UUID: $TENANT" \
  -H "Content-Type: application/json" \
  -d '{ "entries": [
        { "value": "api.openai.com", "source": "manual", "source_ref": "template:openai-runtime" },
        { "value": "api.smith.langchain.com", "source": "manual", "source_ref": "template:langsmith" }
      ] }'

Wildcards

Templates do not include wildcard entries. Approving an entire cloud provider domain removes the scope the policy is intended to provide. Where a vendor publishes a hostname pattern, the template shows the pattern with the resource or region as a placeholder.

Evaluate Agent DNS with your own agent traffic

Import the templates in use, enable the Greywall hold, and review the remaining first-seen names.

See It Live View Pricing