Function checkMcpDomain

apps/sim/lib/mcp/domain-check.ts:36–45

* Core domain check. Returns null if the URL is allowed, or the hostname/url * string to use in the rejection error.

(url: string)

 * string to use in the rejection error.
 */
function checkMcpDomain(url: string): string | null {
  const allowedDomains = getAllowedMcpDomainsFromEnv()
  if (allowedDomains === null) return null
  try {
    const hostname = new URL(url).hostname.toLowerCase()
    return allowedDomains.includes(hostname) ? null : hostname
  } catch {
    return url
  }
}

/**
 * Returns true if the URL's hostname contains an env var reference,