tinyhumansai/openhuman · error

I'm not allowed to open '{host}' — it isn't in your allowed

Error message

I'm not allowed to open '{host}' — it isn't in your allowed websites. Add it (or turn on "Allow all sites") under Settings → Advanced → Search engine → Allowed websites, then ask me again.

What it means

Error "I'm not allowed to open '{host}' — it isn't in your allowed websites. Add it (or turn on "Allow all sites") under Settings → Advanced → Search engine → Allowed websites, then ask me again." thrown in tinyhumansai/openhuman.

Source

Thrown at src/openhuman/tools/impl/network/url_guard.rs:73

                "open"
            } else {
                "strict"
            }
        );
        anyhow::bail!("Blocked local/private host: {host}");
    }

    // Empty allowed_domains = open mode: any public non-private host is
    // permitted (same as ["*"]). This ensures the http_request tool works
    // out of the box regardless of whether the user configured an explicit
    // domain list, and keeps web-fetch consistent across routing paths.
    // A non-empty list = strict mode: only listed domains pass. (#2700)
    if !allowed_domains.is_empty() && !host_matches_allowlist(&host, allowed_domains) {
        log::debug!(
            "[url_guard] strict-allowlist rejection: host={host} allowed={:?}",
            allowed_domains
        );
        anyhow::bail!(
            "I'm not allowed to open '{host}' — it isn't in your allowed websites. \
             Add it (or turn on \"Allow all sites\") under \
             Settings → Advanced → Search engine → Allowed websites, then ask me again."
        );
    }

    log::debug!(
        "[url_guard] validate_url ok: host={host} mode={}",
        if allowed_domains.is_empty() {
            "open"
        } else {
            "strict"
        }
    );

    Ok(url.to_string())
}

View on GitHub (pinned to 7491200858)

Solutions

1. Add the site to the allowed websites list under Settings → Advanced → Search engine → Allowed websites
2. Enable 'Allow all sites' in those settings to switch to open mode
3. Ask the user to adjust the allowlist rather than bypassing the guard

When it happens

Trigger: Thrown at src/openhuman/tools/impl/network/url_guard.rs:73 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of tinyhumansai/openhuman@7491200858 (2026-08-17). Data as JSON: /api/errors/30d39dd90137e96c. Report an issue: GitHub.