Skip to main content

Web Fetch

The web_fetch tool does a plain HTTP GET and extracts readable content (HTML to markdown or text). It does not execute JavaScript. For JS-heavy sites or login-protected pages, use the Web Browser instead.

Quick start

web_fetch is enabled by default — no configuration needed. The agent can call it immediately:

Tool parameters

How it works

1

Fetch

Sends an HTTP GET with a Chrome-like User-Agent and Accept-Language header. Blocks private/internal hostnames and re-checks redirects.
2

Extract

Runs Readability (main-content extraction) on the HTML response.
3

Fallback (optional)

If Readability fails and Firecrawl is configured, retries through the Firecrawl API with bot-circumvention mode.
4

Cache

Results are cached for 15 minutes (configurable) to reduce repeated fetches of the same URL.

Config

Firecrawl fallback

If Readability extraction fails, web_fetch can fall back to Firecrawl for bot-circumvention and better extraction:
plugins.entries.firecrawl.config.webFetch.apiKey supports SecretRef objects. Legacy tools.web.fetch.firecrawl.* config is auto-migrated by velaclaw doctor --fix.
If Firecrawl is enabled and its SecretRef is unresolved with no FIRECRAWL_API_KEY env fallback, gateway startup fails fast.
Firecrawl baseUrl overrides are locked down: they must use https:// and the official Firecrawl host (api.firecrawl.dev).
Current runtime behavior:
  • tools.web.fetch.provider selects the fetch fallback provider explicitly.
  • If provider is omitted, Velaclaw auto-detects the first ready web-fetch provider from available credentials. Today the bundled provider is Firecrawl.
  • If Readability is disabled, web_fetch skips straight to the selected provider fallback. If no provider is available, it fails closed.
  • tools.web.fetch.useEnvProxy: true routes requests through trusted HTTP_PROXY / HTTPS_PROXY env vars while still rejecting direct localhost, .local, .internal, and literal private-IP targets. Use this when fake-IP or TUN proxy setups make local DNS pinning misclassify external websites.

Limits and safety

  • maxChars is clamped to tools.web.fetch.maxCharsCap
  • Response body is capped at maxResponseBytes before parsing; oversized responses are truncated with a warning
  • Private/internal hostnames are blocked
  • useEnvProxy skips local DNS pinning, so it is for operator-controlled proxy environments only; it does not turn web_fetch into a general private-network fetch tool
  • Redirects are checked and limited by maxRedirects
  • web_fetch is best-effort — some sites need the Web Browser

Tool profiles

If you use tool profiles or allowlists, add web_fetch or group:web:
  • Web Search — search the web with multiple providers
  • Web Browser — full browser automation for JS-heavy sites
  • Firecrawl — Firecrawl search and scrape tools