Admin Settings → Search configures the internet access that powers the Web Search capability: which search provider answers, how pages are loaded, and what may be fetched.
Note:
In air-gapped or restricted deployments, web search is left disabled; chat then relies on knowledge bases only. Everything below applies when internet access is permitted.
Search provider
Configure one primary provider (deployment-dependent):
| Provider style | What you provide |
|---|---|
| Major hosted search APIs | Provider API key (and engine id where required). |
| Alternative search APIs | Their respective keys/endpoints. |
| External Web Search URL + key | A search service you run or purchase behind a standard interface. |
| Perplexity-style answer APIs | An API key for direct answered results. |
Page loading (web loader)
After search results, pages are fetched for reading:
| Option | Effect |
|---|---|
| External Web Loader URL/key | Route page fetching through an external rendering service. |
| Firecrawl API base/key | A crawler-style loader option. |
| Playwright WebSocket URL + timeout | Render JavaScript-heavy pages with a browser worker. |
| Bypass Web Loader | Skip fetching and use result snippets only — faster, less complete. |
Controls
| Option | Effect |
|---|---|
| Domain Filter List | Comma-separated allow/deny list of domains (for example example.com,site.org). Use this to keep answers inside approved sources. |
| Concurrent Requests | How many searches run in parallel — protects providers and your network. |
| Query language codes | Restrict/prefer result languages. |
| Proxy URL | Route external fetches through your egress proxy (including credentialed proxies) so all traffic follows your network policy. |
| Bypass Embedding and Retrieval | Advanced; changes how fetched content is used. |
Governance
- Data leaves when searching — prompts go to the search provider. Document this in your acceptable-use policy; restrict by permissions where only some groups need it.
- Domain filtering + proxy = your control plane — approved domains plus egress proxy logging give auditable internet use.