/**
 * Validates ZPL_ENGINE_URL before any request with the API key.
 * Mitigates misconfiguration / phishing configs that would send Bearer tokens to a hostile host.
 */
export declare function getValidatedEngineBaseUrl(): string;
/** Clears cached URL (for tests or dynamic env reload). Not used in normal MCP operation. */
export declare function resetValidatedEngineUrlCache(): void;