Unverified50% confidenceFactExact time
The OpenShell supervisor checks HTTP methods rather than just hostnames; for example, when curl is allowed read-only access to the GitHub API, POST requests are still blocked.
1
Sources
50%
Confidence
Long-term
Relevance
10/27/2026
First Seen
Sources
NVIDIA OpenShell Tutorial: Free Sandbox Isolation for AI Agents, Protecting API Keys
bilibili莉雅水嘟嘟10/3/2026
Related Entities
Related Claims
UnverifiedWebhooks and Git hooks are bound to paths and credentials, not to the specific identity of the caller.65% similarUnverifiedWhether HTTP is read-only or writable is not determined by the protocol method but by the server; many wikis, pastebins and admin panels accept GET requests to directly perform write operations.65% similarUnverifiedExtension-based blocking solutions (such as uBlock Origin) rely on the WebRequest or Declarative Net Request APIs provided by the browser.64% similarUnverifiedFor services that are not natively supported, users can call any REST API via the HTTP Request node, or implement custom logic by writing JavaScript/Python in the Code node.63% similarUnverifiedBrowser automation solutions (such as Playwright or real browser-engine-based crawling) are less likely to be identified by anti-crawling mechanisms than directly making HTTP requests.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1103883API
curl https://kongchang.com/api/v1/knowledge/claims/1103883MCP
get_claim(id=1103883)