http_post

What it does

• Sends POST requests with JSON or form body to whitelisted hosts.
• Auth headers and bearer tokens supported via the headers field.
• Returns status, headers, and body for the model to reason about.

API spec

{
  "name": "http_post",
  "input_schema": {
    "properties": {
      "url": { "type": "string", "format": "uri" },
      "body": { "type": "object" },
      "headers": { "type": "object" },
      "as_form": { "type": "boolean", "default": false }
    },
    "required": ["url", "body"]
  }
}

Security

Allowlisted hosts only. Tokens come from your env-vars or memory store, never sent in plaintext logs. Audit log captures URL + status, not bodies.

Used by

Gotchas

• Side-effecting calls — wrap in confirmation flow if you do not want auto-send.
• Rate limits hit you, not us. Add backoff if you broadcast bulk POSTs.