Managed Agents hardens network and accessible URLs
The allowed_hosts restrictions also apply to web tools, and web_fetch denies URLs missing from the previous eligible context.
actual change
Facts, analysis and limits
Verified facts
- Network limited: web_search and web_fetch submitted to allowed_hosts.
- Disagreement allowed_domains/allowed_hosts: 400 errors at creation or update.
- A URL appearing only in model output, a document or bash output is no longer sufficient for web_fetch.
What changes
Reduced exfiltration risk at the cost of more explicit integration.
Practical implication
Replay network tests and provide approved URLs in user.message.
Availability
Belgium/EEA: not specified in the source; access depends on the plan, rollout and administrator settings.
Limits and uncertainty
Change of compatibility that may interrupt existing workflows; unrestricted and self-hosted environments have different rules.