The proxy hardcodes six builtin passthrough domains that are always reachable without credential injection: clawhub.ai, openrouter.ai, github.com, codeload.github.com, raw.githubusercontent.com, and registry.npmjs.org. On locked-down enterprise clusters, ITOps needs to block some or all of these public domains — for example, blocking npmjs.org to force agents to use an internal npm mirror, or blocking openrouter.ai to prevent unauthorized model usage. Currently there is no way to disable individual builtins without modifying the operator source.
See https://github.com/redhat-et/claw-operator/tree/main/openspec/changes/add-builtin-passthroughs
The proxy hardcodes six builtin passthrough domains that are always reachable without credential injection: clawhub.ai, openrouter.ai, github.com, codeload.github.com, raw.githubusercontent.com, and registry.npmjs.org. On locked-down enterprise clusters, ITOps needs to block some or all of these public domains — for example, blocking npmjs.org to force agents to use an internal npm mirror, or blocking openrouter.ai to prevent unauthorized model usage. Currently there is no way to disable individual builtins without modifying the operator source.
See https://github.com/redhat-et/claw-operator/tree/main/openspec/changes/add-builtin-passthroughs