What is AgentSecrets?
The Zero-Knowledge Difference
How AgentSecrets Works
Installation
Quick Start
Migrating from .env Files
Migrating from Vault / AWS
Migrating from dotenv-vault
Production Checklist
Credential Exposure
What Zero-Knowledge Means
The Proxy Model
The Three-Layer Model
Environments
Agent Identity
Storage Modes
The No get() Principle
Secret-Level Policies
Cloud Overview & Architecture
The Dual-Engine Model
Cloud Resolver Data Plane
Workload & Agent Tokens
Egress Allowlists & Audit Streams
Cloud REST API Reference
Account (init / login)
Server & Self-Hosting (server)
Docs
Shell Autocompletion
Keychain Auth
Secrets
Environments
Credential Proxy
env Injection
Workspaces & Teams
Projects
Agent Identity
Audit & Governance
Integrations Overview
Claude Desktop
Cursor
OpenClaw
HTTP Proxy (Any)
LangChain (Soon)
CrewAI (Soon)
CI/CD Pipeline
SDK Overview
Python SDK
Python API Reference
Python SDK Manual Testing
JavaScript SDK (Soon)
Ecosystem Overview
Zero-Knowledge MCP Server
Server Overview
5-Layer Architecture
Self-Hosting Guide
Authentication & Keys
Workspaces & Teams
Projects & Scope
Environments
Secrets & Sync Protocol
Agent Identity Resolution
Telemetry & Metrics Engine
Audit Log Sync
API Endpoint Reference
Security Overview
Anti-Impersonation & Process Verification
Encryption Model
Zero-Knowledge Sync
Proxy Security Layers
Threat Model
OWASP Top 10 Mitigation
Security FAQ
Third-Party Audit
Reporting Vulnerabilities
Guides Overview
Building on the SDK
Stripe Integration
OpenAI Integration
Multi-Agent Setup
Onboarding Team
CI/CD Pipeline
Publishing ZK MCP
Rotating Credentials
Auditing Team Activity
Dev to Production
Kubernetes Deployment
Monorepo Setup
Production Proxy Hardening
vs .env Files
vs HashiCorp Vault
vs AWS Secrets Manager
vs dotenv-vault
vs Infisical
When Not to Use
Proxy Not Starting
Proxy Not Resolving
Domain Blocked
Sync Conflicts
MCP Not Connecting
Session Token Errors
Proxy Session Authorization
Keychain Storage & Backends
SSRF & Destination Rules
Installation Issues
Error Codes Reference
Frequently Asked Questions
v3.1.x
v3.0.0
v2.1.0
v2.0.0
v1.4.0
v1.3.x
v1.2.0
v1.1.x
v1.0.x
TroubleshootingDomain Blocked

Fixing "Domain Blocked" 403 Errors

If your AI agent's API request fails with a 403 Forbidden error originating from the AgentSecrets proxy, it means the target API domain has not been authorized in your workspace's Zero-Trust Allowlist.

Why does AgentSecrets block domains?

To prevent Server-Side Request Forgery (SSRF) and malicious data exfiltration, the AgentSecrets HTTP Proxy and MCP Server operate on a deny-by-default basis. Even if a valid credential is provided, the proxy will refuse to inject the secret or forward the request if the destination domain is not explicitly allowed.

Secrets are never accessed from the keychain if the domain is blocked. The allowlist enforcement happensbefore secret resolution.

How to Allowlist a Domain

You can authorize domains using the AgentSecrets CLI. This action requires an admin role within your workspace.

1Identify the Blocked Domain

Check your proxy audit logs to see exactly which domain was blocked:

agentsecrets proxy logs --last 5

Look for entries with "action": "blocked_by_allowlist".

2Add the Domain to the Allowlist

Use the workspace allowlist add command to authorize the domain:

agentsecrets workspace allowlist add api.stripe.com

You can also add multiple domains at once:

agentsecrets workspace allowlist add api.stripe.com api.github.com

3Verify the Allowlist

To ensure the domain was successfully added and propagated:

agentsecrets workspace allowlist list

Common Scenarios

  • Subdomains: The allowlist is strict. If you allowlist stripe.com, requests to api.stripe.com will still be blocked unless you explicitly allow api.stripe.com or use wildcard configurations (if enabled in your workspace).
  • Internal IP Addresses: Agents cannot proxy requests to internal network endpoints (e.g., 192.168.x.x or 10.x.x.x) unless explicitly allowed. This is a critical protection against internal network scanning.

If you are setting up a new project, runagentsecrets workspace allowlist log to view recent allowlist activity and identify any unexpected blocks triggered by your agent.

Was this helpful?
Thanks for your feedback!
Your feedback helps us improve the platform.