Skip to main content

Web Search Rules

Web Search Rules let you control which parts of the internet agents in your organization are allowed to reach. You manage them from the Organization Config section of the admin panel, under Web Search Rules — described there as "Control how your organization accesses the internet through Clove."

Changes apply to all sandbox agents in your organization, so this is the single place to set your internet-access policy for everyone.

Choosing a Mode​

Web Search Rules operate in one of two modes. You choose the one that matches your organization's posture.

Allow List​

Agents can only reach the domains you explicitly list. Everything else is blocked.

Sandbox agents can only search URLs that appear in the allow list below. All other domains are blocked.

Use this when you want a tightly controlled set of approved, trusted sources — for example, specific standards bodies, vendor sites, or internal references.

Block List​

Agents can reach any site except the ones you list.

Sandbox agents can search any URL except those listed below. Anything in the block list is rejected.

Use this when you want broad internet access with a few specific exceptions.

note

There is no separate "no restrictions" mode. To allow unrestricted access, select Block List and leave it empty — blocking nothing blocks no one.

Managing Domains​

  1. Go to Organization Config → Web Search Rules.
  2. Select the mode you want: Allow List or Block List.
  3. Click to add URLs. The add dialog accepts one URL per line or a comma-separated list, for example:
    • example.com
    • docs.example.com/api
    • https://blog.example.com
  4. Edit or remove any entry from the menu on its row.
  5. Click Apply to save your changes. Until you apply, new entries are marked as pending; you can discard them to revert.

The widget shows a running count of the URLs in your active list so you can see the size of your policy at a glance.

How This Affects Agents and Tools​

  • Agents with internet search honor these rules whenever they search the web, so users only ever reach domains your policy permits. For the user's view of internet search, see Internet Search.
  • Custom tools in the Agent Builder that use internet access reflect your active rules automatically. When an author enables internet access on a tool, the allowed-URLs editor mirrors your organization's mode — in Allow List mode, off-list domains are flagged; in Block List mode, blocked domains must be removed before the tool can be saved. This keeps custom tools in compliance without manual syncing.