SSRF_Via_Tool_Parameters

Scenarios where tool arguments (URLs, hostnames, file paths) are crafted to make the agent's tools reach internal/forbidden network resources: localhost, private IP ranges, cloud metadata endpoints.

▶ Try the tools (generate tools first)

Generator controls

|/api/mcp/srv-ssrf-via-tool-parameters

MCP enable + token are only for calling from an external client — the playground below needs neither.

Tools (0)

None yet — hit Generate tools.

Scenarios (0)

None yet — create one after generating tools.