Skip to main content

Squillify development is paused indefinitely. Read why, and discover what this experiment achieved. Read the story

MicroSkills Reference

Check URL Status

web.check_url_status

ProductionBounded custom (Class B)verifiablemoderatev1.0.0
External service

Overview

You send a public http(s) URL and we probe it with a bounded HEAD or GET through our SSRF-safe HTTP client, then hand back the status code, the content type, and how many body bytes came back. Before every hop we resolve the host and refuse loopback, link-local, any-local, RFC 1918 private, and cloud-metadata addresses, so a redirect chain cannot walk into your internal network. Transport problems come back as ok:false with a short error code instead of an exception. We never return the page body, so pass HTML you already have to the web.extract_* skills when you need to parse a page.

You want to verify a link without opening a path into your own network, and without paying for a browser to render the page.

Reliability

The same URL can answer differently from one minute to the next, because the answer belongs to the remote site rather than to us; retry freely, since a probe changes nothing. Egress is guarded on the first request and on every redirect hop: we resolve the host and refuse loopback, link-local, any-local, RFC 1918 private, IPv4-mapped equivalents of those, and the 169.254.169.254 cloud-metadata address, and we accept only http and https. Failures never throw — you get ok:false with error BLOCKED (refused address, unresolvable host, or more redirects than allowed), NETWORK_ERROR (connection failure, timeout, or TLS problem), or INTERRUPTED (the probe was cancelled); the first two are worth one retry only if you expect the remote side to change. Bad input is rejected outright and retrying will not help: a non-http(s) URL, a URL over 8192 characters, a method other than HEAD or GET, or maxRedirects, timeoutMs, or readBodyBytes outside their ranges.

Context footprint

You get back a handful of scalars and two flags — never the page body, so the response stays small however large the page was. A successful call costs 2 execution credits.

When to use it

When you want to know whether a public URL responds, and what it serves back.

When you need the page body itself or browser rendering; this probe returns metadata only.

Runs on the platform's shared outbound HTTP client, which resolves and screens every hop before connecting.

Scope

Note
We probe one public URL and report its status, content type, and body size, refusing any address that resolves inside a private network.

Non-goals

  • Does not render pages or run JavaScript
  • Does not reach loopback, link-local, private, or cloud-metadata addresses
  • Does not return the page body for parsing
  • Does not return response-body content

Properties

IdempotentRetry safeStreaming supportedFile input supportedRequires external service

Capabilities

analysis

Cost & billing

Flat rate per invocation

MetercallsBillable onsuccessCost per call2 credits

File handling

Accepts file_refProduces file_refMax input8 KB

How we handle your data

External service
What this means

This skill sends required payload data to an external service to complete execution.

Squillify guarantees
  • Uses an external service
  • This skill sends required payload data to an external service.
  • Squillify does not permanently store submitted payloads.
  • Telemetry records metadata only, not submitted content.
  • Submitted payloads are not used for training.
  • Submitted payloads are not reviewed by humans.
  • This skill does not target sensitive data.
  • The response does not contain submitted content.
Your responsibility

Squillify does not determine whether submitted content is sensitive. Your application is responsible for deciding what data it is allowed to submit. Your application is responsible for securing the response.

Read the Microskill Data Handling Policy

Input schema

FieldTypeRequiredDescription
urlstringYesAbsolute public HTTP or HTTPS URL to probe.
methodstringNoHTTP method used on the initial request and every followed redirect.
followRedirectsbooleanNoWhether to follow validated public redirects.
maxRedirectsintegerNoMaximum redirect hops when redirect following is enabled.
timeoutMsintegerNoPer-hop response timeout in milliseconds.
readBodyBytesintegerNoMaximum response-body bytes read for GET; HEAD always reads zero.

Output schema

FieldTypeRequiredDescription
okbooleanYesWhether an HTTP response was received.
statusintegerYesFinal HTTP status, or zero when no usable response was received.
finalUrlstringNoFinal validated URL after followed redirects.
contentTypestringNoFinal response Content-Type header when present.
contentLengthintegerNoResponse-body bytes actually read.
bodyTruncatedbooleanNoWhether a GET body exceeded the requested read prefix.
errorstringNoStable reason no usable response was returned.
metadataobjectYesClosed receipt object containing ssrfProtected and followedRedirects execution properties.

API contract

POST /v1/execute
curl
curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"web.check_url_status","input":{"url":"https://example.com/"}}'
Integrations
TypeScript SDK
import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("web.check_url_status", {"url":"https://example.com/"});

Errors

CodeHTTPRetryableDescription
VALIDATION_ERROR400NoThe request payload failed schema validation.
UNAUTHORIZED401NoMissing or invalid API key.
SKILL_NOT_ACCESSIBLE403NoThe API key is not granted access to this skill.
SKILL_NOT_AVAILABLE_FOR_PLAN403NoThis skill is not included in your current plan.
PLAN_ELIGIBILITY_UNAVAILABLE503YesPlan eligibility could not be decided. Retry after backoff.
SKILL_NOT_FOUND404NoThe requested skill or version does not exist.
TENANT_RATE_LIMITED429YesRequest rate limit exceeded. Retry after backoff.
QUOTA_EXCEEDED429YesPlan quota exhausted. Retryable once the quota period resets.
EXECUTION_TIMEOUT504YesExecution exceeded the allowed time budget.

Other limits

LimitValue
Recommended inline bytes32 KiB

Limitations

  • Does not render pages or run JavaScript
  • Does not reach loopback, link-local, private, or cloud-metadata addresses
  • Does not return the page body for parsing
  • Does not return response-body content
  • Downloading HTML for extraction — pass HTML you hold to the web.extract_* skills
  • Browser-accurate rendering, or checks that depend on JavaScript
  • Reaching an internal host, which we always refuse

How to call

POST /v1/execute (requires authentication)

Request bodyjson
{
  "skillKey": "web.check_url_status",
  "input": {
    "url": "https://example.com/"
  }
}

Examples

Public URL responds with 200

Inputjson
{
  "url": "https://example.com/"
}
Expected outputjson
{
  "metadata": {
    "ssrfProtected": true,
    "followedRedirects": true
  },
  "bodyTruncated": false,
  "finalUrl": "https://example.com/",
  "status": 200,
  "contentLength": 1256,
  "contentType": "text/html; charset=UTF-8",
  "ok": true
}

Loopback address refused before any request

Inputjson
{
  "url": "http://127.0.0.1/admin"
}
Expected outputjson
{
  "ok": false,
  "metadata": {
    "ssrfProtected": true,
    "followedRedirects": true
  },
  "error": "BLOCKED",
  "status": 0
}
  • Check that a link responds before you store or publish it
  • Spot-check uptime, or learn what content type a URL serves
  • Confirm a redirect chain resolves to a reachable public target

Avoid for

  • Downloading HTML for extraction — pass HTML you hold to the web.extract_* skills
  • Browser-accurate rendering, or checks that depend on JavaScript
  • Reaching an internal host, which we always refuse

Composable with

Safety & privacy

  • Your payloads are never stored permanently.
  • Telemetry captures metadata only — never your payload contents.
  • We never train models on your payloads.
  • No human reviews your payloads.

Tags

urlhttpweb