# Starter egress allowlist for groundcrew agent runs.
#
# Loaded by @clipboard-health/clearance via CLEARANCE_ALLOW_HOSTS_FILES.
# Add hosts in alphabetical order (numeric-aware: sa9 before sa10).
#
# Extend this file with hosts your project's agents need to reach
# (your VPN, internal staging domains, etc.). Wildcards (e.g. *.example.com)
# are supported.

# AI provider APIs
ab.chatgpt.com
api.anthropic.com
api.openai.com
chatgpt.com
platform.claude.com

# Hosted MCP servers + their auth/web hosts
api.linear.app
api.notion.com
api.slack.com
developers.notion.com
linear.app
mcp.linear.app
mcp.notion.com
mcp.slack.com
slack.com

# Datadog (logs/metrics queries). No wildcard — blocks http-intake.logs.*.
api.datadoghq.com
app.datadoghq.com
datadoghq.com

# GitHub + GHA artifact storage (Azure blobs)
api.github.com
cafe.github.com
codeload.github.com
github.com
productionresultssa0.blob.core.windows.net
productionresultssa1.blob.core.windows.net
productionresultssa2.blob.core.windows.net
productionresultssa3.blob.core.windows.net
productionresultssa4.blob.core.windows.net
productionresultssa5.blob.core.windows.net
productionresultssa6.blob.core.windows.net
productionresultssa7.blob.core.windows.net
productionresultssa8.blob.core.windows.net
productionresultssa9.blob.core.windows.net
productionresultssa10.blob.core.windows.net
productionresultssa11.blob.core.windows.net
productionresultssa12.blob.core.windows.net
productionresultssa13.blob.core.windows.net
productionresultssa14.blob.core.windows.net
productionresultssa15.blob.core.windows.net
productionresultssa16.blob.core.windows.net
productionresultssa17.blob.core.windows.net
productionresultssa18.blob.core.windows.net
productionresultssa19.blob.core.windows.net
raw.githubusercontent.com
release-assets.githubusercontent.com
results-receiver.actions.githubusercontent.com

# npm registry + package website
api.npmjs.org
registry.npmjs.org
www.npmjs.com

# Developer tooling
buf.build
cdn.playwright.dev
formulae.brew.sh
hub.docker.com
index.docker.io
nx.dev
sourcegraph.com
vitest.dev
