Skip to main content

HTTP Client

HTTP Client lets Lightflare call approved HTTP and HTTPS endpoints from workflows or agent runs. Use it for structured API calls when a dedicated integration does not exist.

Tools

ToolPurpose
http-getSend an HTTP GET request.
http-postSend an HTTP POST request with optional body.
http-putSend an HTTP PUT request with optional body.
http-deleteSend an HTTP DELETE request with optional body.

http-get Inputs

InputRequiredDescription
urlyesFull HTTP or HTTPS URL.
headersnoHeader object with string values.

http-post, http-put, and http-delete Inputs

InputRequiredDescription
urlyesFull HTTP or HTTPS URL.
bodynoRequest body as a string. JSON bodies are supported.
headersnoHeader object with string values.

Required Properties

VariableDescription
LIGHTFLARE_TOOLS_HTTPCLIENT_ENABLEDSet to true.
LIGHTFLARE_TOOLS_HTTPCLIENT_ENABLED_TOOLSComma-separated tool allowlist. Use one or more of http-get, http-post, http-put, and http-delete.

Optional Properties

VariableDefaultDescription
LIGHTFLARE_TOOLS_HTTPCLIENT_ENABLED_TOOLS[]Exposed HTTP Client tools. Empty exposes no HTTP Client tools.
LIGHTFLARE_TOOLS_HTTPCLIENT_CONNECT_TIMEOUT5sConnection timeout.
LIGHTFLARE_TOOLS_HTTPCLIENT_READ_TIMEOUT30sRead timeout.
LIGHTFLARE_TOOLS_HTTPCLIENT_ALLOWED_HOSTS[]Host allowlist. Empty allows any public host. Wildcard subdomains can be written as *.domain.
LIGHTFLARE_TOOLS_HTTPCLIENT_ALLOW_PRIVATE_NETWORKfalseAllow requests to private, local, link-local, multicast, shared, or cloud metadata addresses.

HTTP Client rejects URLs without an HTTP or HTTPS scheme, URLs with embedded user information, and private network targets unless private network access is explicitly allowed.