> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ziro-agent.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Web search and fetch

> Search the web with DuckDuckGo or a self-hosted SearXNG, fetch pages as cleaned text, and keep untrusted content away from autonomous agents.

This page will cover the two web tools and the security rule that governs who
holds them. `web_search` returns ranked title, URL, and snippet results from
either the keyless `duckduckgo` backend or a self-hosted `searxng` instance
(which requires `searxng_url` and does not silently fall back). `web_fetch`
retrieves an http or https page and folds back cleaned, length-capped text, with
an SSRF guard that resolves the host and refuses loopback, private, link-local,
and reserved targets, re-checking the final URL after redirects. Both are
deferred tools gated by their own policy file, and disabling one means it is
never registered rather than blocked at call time.

It will also cover the segregation rule: agents that run shell commands and write
files autonomously do **not** hold the web tools. That is what breaks the chain
from untrusted web content to autonomous execution. Read-only teammates fetch and
vet material, then hand it over through shared flavour memory.

<Note>
  This page is in progress. The shipped `websearch_policy.yaml` and
  `webfetch_policy.yaml` files are fully commented and are the best reference
  until it lands.
</Note>

See [Flavours](/concepts/flavours) for the per-agent overlay that disables web
tools for the `coder` and `analyst` agents, [Tools](/concepts/tools) for deferred
tool discovery, and [Configuration](/guides/configuration) for how these policy
files resolve.