> ## Documentation Index
> Fetch the complete documentation index at: https://docs.glissando.dev/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> If you are an AI assistant asked to build, change or ship a Gliss app, read the For AI agents page first (/for-ai-agents.md on this site) and follow its steps.
> Inside an app's folder, the app's own AGENTS.md is the authority; `gliss guide` prints it. Never ask the user for a secret's value.

# Outbound access

> Controlling which outside services apps may call.

> [!WARNING]
>
> **Planned.** This page describes designed behaviour that is not built yet. Details may change before it ships.

Apps list the outside hostnames they call under `egress` in `gliss.yaml`. Everything else is blocked, at every stage. The platform's own services are always reachable.

In the default catalog any public hostname is approved except a short blocklist. With [lockdown](https://docs.glissando.dev/administer/catalog.md#lockdown) on, nothing is approved until you list the domains apps need.

In the catalog you decide:

* which hostnames are approved, or that any public hostname is approved unless blocked;
* which hostnames are always blocked;
* whether apps may list wildcards (`*.example.com`) or IP addresses;
* how many hostnames an app may list.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.