Egress Allowlist - What domains should we add to the default profile?

[pallakatos]

Egress Allowlist — what domains should we add to the default profile? 🌐

kars sandboxes are locked down by default: the egress-guard init container blocks all outbound traffic except what's explicitly allowed, and the inference router is the only governed network path out. Outbound destinations are managed through a signed OCI allowlist profile so you can trust exactly what your agents can reach.

We're refining the default egress allowlist profile and want your input. Which common APIs and domains do you most frequently need your agents to reach?

Some categories we're considering:

• 🔎 Search providers — Brave, Tavily, Exa, Perplexity, SerpAPI, etc.
• 🐙 Developer platforms — GitHub, GitLab, package registries (npm, PyPI, crates.io).
• 📝 Productivity / knowledge — Notion, Linear, Slack, Confluence.
• ☁️ Cloud & data — specific Azure endpoints, object storage, vector DBs.

Tell us:

1. Which domains/APIs are must-haves for your agents?
2. Should they be in the default profile, or opt-in?
3. Any domains you'd explicitly want blocked by default for safety?

Note: anything added to the default profile goes through security review and is published as a signed OCI allowlist — your suggestions help us prioritize. 🔐

Drop your wishlist below! 👇