/**
 * Validate an outbound request URL against an API's host allow-list before the gateway fetches it.
 *
 * Returns the parsed URL on success; throws with a clear message otherwise.
 */
export declare function assertUrlAllowed(rawUrl: string, matchers: readonly RegExp[]): URL;
/** True for localhost or any literal IP in a blocked (private/reserved/loopback/link-local/…) range. */
export declare function isBlockedAddress(host: string): boolean;
//# sourceMappingURL=ssrf-guard.d.ts.map