Web Fetch
Theweb_fetch tool does a plain HTTP GET and extracts readable content
(HTML to markdown or text). It does not execute JavaScript.
For JS-heavy sites or login-protected pages, use the
Web Browser instead.
Quick start
web_fetch is enabled by default — no configuration needed. The agent can
call it immediately:
Tool parameters
How it works
1
Fetch
Sends an HTTP GET with a Chrome-like User-Agent and
Accept-Language
header. Blocks private/internal hostnames and re-checks redirects.2
Extract
Runs Readability (main-content extraction) on the HTML response.
3
Fallback (optional)
If Readability fails and Firecrawl is configured, retries through the
Firecrawl API with bot-circumvention mode.
4
Cache
Results are cached for 15 minutes (configurable) to reduce repeated
fetches of the same URL.
Config
Firecrawl fallback
If Readability extraction fails,web_fetch can fall back to
Firecrawl for bot-circumvention and better extraction:
plugins.entries.firecrawl.config.webFetch.apiKey supports SecretRef objects.
Legacy tools.web.fetch.firecrawl.* config is auto-migrated by velaclaw doctor --fix.
If Firecrawl is enabled and its SecretRef is unresolved with no
FIRECRAWL_API_KEY env fallback, gateway startup fails fast.Firecrawl
baseUrl overrides are locked down: they must use https:// and
the official Firecrawl host (api.firecrawl.dev).tools.web.fetch.providerselects the fetch fallback provider explicitly.- If
provideris omitted, Velaclaw auto-detects the first ready web-fetch provider from available credentials. Today the bundled provider is Firecrawl. - If Readability is disabled,
web_fetchskips straight to the selected provider fallback. If no provider is available, it fails closed. tools.web.fetch.useEnvProxy: trueroutes requests through trustedHTTP_PROXY/HTTPS_PROXYenv vars while still rejecting directlocalhost,.local,.internal, and literal private-IP targets. Use this when fake-IP or TUN proxy setups make local DNS pinning misclassify external websites.
Limits and safety
maxCharsis clamped totools.web.fetch.maxCharsCap- Response body is capped at
maxResponseBytesbefore parsing; oversized responses are truncated with a warning - Private/internal hostnames are blocked
useEnvProxyskips local DNS pinning, so it is for operator-controlled proxy environments only; it does not turnweb_fetchinto a general private-network fetch tool- Redirects are checked and limited by
maxRedirects web_fetchis best-effort — some sites need the Web Browser
Tool profiles
If you use tool profiles or allowlists, addweb_fetch or group:web:
Related
- Web Search — search the web with multiple providers
- Web Browser — full browser automation for JS-heavy sites
- Firecrawl — Firecrawl search and scrape tools