openclaw - 💡(How to fix) Fix [Feature]: Per-provider proxy configuration for web search (like Telegram's proxy setting) [1 comments, 2 participants]

Problem

In regions where certain web search APIs are blocked (e.g., Brave Search from China), a per-provider HTTP proxy is needed. Currently:

• Global HTTP_PROXY/HTTPS_PROXY env vars affect all 10 web search providers and the entire web tools stack — too broad
• OPENCLAW_PROXY_URL / proxy.proxyUrl is also global
• The only workaround is a local patch that bypasses the SSRF guard entirely (unsafe)

Proposal

Add a per-provider proxy config field for web search providers, similar to how channels.telegram.proxy works today.

Telegram already has this pattern:

channels:
  telegram:
    proxy: "http://localhost:1085"

The proposed config would look like:

tools:
  web:
    search:
      brave:
        mode: web
        proxy: "http://localhost:1085"    # ← new field
      perplexity:
        proxy: "http://localhost:1085"    # ← works for any provider

Or via environment variable per provider:

BRAVE_PROXY_URL=http://localhost:1085
PERPLEXITY_PROXY_URL=http://localhost:1085

Implementation Notes

• The Brave provider currently uses withTrustedWebToolsEndpoint() which reads global env proxy vars
• A per-provider proxy could be passed down through SearchConfigRecord and used in the provider runtime
• Telegram's pattern (account.config.proxy → makeProxyFetch(proxy)) is a clean reference implementation
• The proxy should only apply to that specific provider's API calls, not to all web tools

Current Workaround

Local patch in wy-local-patch branch that uses fetchWithRuntimeDispatcher + createHttp1ProxyAgent to route only Brave requests through a specified proxy. Functional but bypasses SSRF guard.

Related

• #19075 — baseUrl option for Brave (alternative approach: self-hosted reverse proxy)
• #74357 — SSRF policy scope issue
• #27405 — Original proxy support (global only)
• Commit d8e2030d47 — fix(web-search): honor HTTP_PROXY (global env var approach)

Environment

• OpenClaw running in China behind a local HTTP forward proxy
• Need Brave Search specifically, other providers may not need proxy