HTTP Request
Calls an HTTP API you nominate, with the credentials held server-side and never shown to the model.
The escape hatch for everything without a dedicated connector: an internal order service, a partner API, a legacy endpoint somebody wrote in 2018.
Outbound calls are checked against private and link-local address ranges before the request is made and again after every redirect, so an agent cannot be talked into fetching a cloud metadata endpoint. The address that was checked is the address that is dialled.