> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuro-tech.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Internet Content MCP server

> Retrieve and modify Internet resources through a controlled Neuron egress point

The Internet Content server at `/MCP/Content` lets an MCP client make outbound requests using Neuron's content decoders. When the Neuron has a client certificate, requests can use it for mTLS.

## Tools

| Tool   | Modifies | Destructive | Idempotent | Privilege suffix |
| ------ | -------- | ----------- | ---------- | ---------------- |
| Get    | No       | No          | Yes        | `.Tools.Get`     |
| Post   | Yes      | Yes         | No         | `.Tools.Post`    |
| Put    | Yes      | Yes         | Yes        | `.Tools.Put`     |
| Delete | Yes      | Yes         | No         | `.Tools.Delete`  |
| Query  | No       | No          | Yes        | `.Tools.Query`   |

The full privilege prefix is `OAUTH.Scope.MCP.InternetContent`.

## Common parameters

* `URI`: absolute target URI.
* `Accept`: expected response media type; defaults to `*/*`.
* `Accept-Language`: preferred human language.
* `Timeout`: 1–60,000 ms; defaults to 30,000 ms.
* `AdditionalHeaders`: optional string-valued request headers.
* `Payload`: object encoded for POST, PUT, or QUERY.

The result contains the decoded content together with its Internet content type and source URI.

## Egress policy

This server has open-world access. Granting `Get` allows an agent to reach addresses visible from the Neuron, which may include private infrastructure.

Production controls should:

* allow secure schemes such as HTTPS and reject insecure HTTP;
* block loopback, link-local, cloud metadata, and private address ranges unless explicitly needed;
* resolve DNS again at connection time to reduce rebinding risk;
* restrict target hosts and ports;
* remove credentials from redirects to another origin;
* cap body sizes and timeouts;
* log target, actor, method, status, and policy decision.

Do not grant write methods to an agent that only summarizes web content.
