Your agent's fetch tool can reach 169.254.169.254: an 80-line SSRF guard for MCP and agent tools in Node

Any tool that fetches a URL an LLM picked is a server-side request forgery risk. A dependency-free Node guard that checks schemes, ports, IP literals, every DNS answer at connect time and every redirect hop, tested against 12 real URLs.