schemaVersion: '2'
kind: mixin
name: built-in-tools
description: >
  Installs binaries and allows network domains required by Coyote's built-in
  global tools and the default MCP server set. Auto-applied by Coyote's sbx
  mixin discovery when running `coyote --sandbox`.

permissions:
  network:
    allow:
      # fetch_url_via_jina + jina reader fallback
      - 'r.jina.ai'
      # get_current_weather (.sh, .py, .ts)
      - 'wttr.in'
      # search_arxiv (the .sh tool still uses http://, so :80 is required until fixed)
      - 'export.arxiv.org'
      - 'export.arxiv.org:80'
      # search_arxiv + search_wikipedia may follow DOI redirects
      - 'doi.org'
      # search_wikipedia
      - 'en.wikipedia.org'
      # search_wolframalpha
      - 'api.wolframalpha.com'
      # web_search_perplexity
      - 'api.perplexity.ai'
      # web_search_tavily
      - 'api.tavily.com'
      # send_twilio
      - 'api.twilio.com'
      # MCP: github (built-in mcp.json: api.githubcopilot.com)
      - 'api.githubcopilot.com'
      # MCP: atlassian (built-in mcp.json: mcp-remote -> mcp.atlassian.com)
      - 'mcp.atlassian.com'
      # MCP: ddg-search (built-in mcp.json: uvx duckduckgo-mcp-server)
      - 'duckduckgo.com'
      - 'html.duckduckgo.com'
      - 'lite.duckduckgo.com'
      # MCP: npx-based servers (mcp-remote) pull from npm
      - 'registry.npmjs.org'
      # MCP: docker server may pull images from common registries
      - 'ghcr.io'
      - 'registry-1.docker.io'
      - 'auth.docker.io'