Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.sigilcore.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Warranty Policy — API Integration Agent

version: 1.0.0

​
tool_calls

allowed: bash, web_fetch, email.send bash.blocked_commands: rm -rf, curl -X DELETE, wget —delete-after web_fetch.blocked_domains: localhost, 127.0.0.1, 0.0.0.0, 169.254.169.254, metadata.google.internal email.require_approval: true

​
custom

​
Block any request to internal/private networks

deny_if.intent.url contains “localhost” deny_if.intent.url contains “127.0.0.1” deny_if.intent.url contains “192.168.” deny_if.intent.url contains “10.0.” deny_if.intent.url starts_with “http://“

​
Block SSRF attempts via cloud metadata endpoints

deny_if.intent.url contains “169.254.169.254” deny_if.intent.url contains “metadata.google.internal”

​
Block credential leakage in request bodies

deny_string: “OPENAI_API_KEY” deny_string: “ANTHROPIC_API_KEY” deny_string: “STRIPE_SECRET_KEY” deny_string: “DATABASE_URL” deny_string: “BEGIN RSA PRIVATE KEY”

​
Block mass data exfiltration patterns

deny_if.intent.metadata.record_count contains “1000” deny_if.intent.command contains “SELECT * FROM”

​
soft_limits

daily_tool_calls: 500

​
signature

sigil-sig: REPLACE_WITH_OUTPUT_FROM_SIGNING_TOOL