/**
 * urlValidator.ts — SSRF protection for HTTP tools.
 *
 * Blocks private IPs, internal hostnames, and dangerous schemes.
 */
export interface UrlValidationOpts {
    /** Allow requests to private/internal IPs (for known internal services) */
    allowPrivate?: boolean;
    /** Additional blocked hostnames */
    blockedHostnames?: string[];
}
/**
 * Validate a URL for SSRF safety.
 *
 * @throws SecurityError if URL targets private infrastructure
 * @returns The validated URL string
 */
export declare function safeUrl(url: string, opts?: UrlValidationOpts): string;
/**
 * Async version that also checks DNS resolution for rebinding attacks.
 * Use this for user-facing tools where the hostname isn't known-safe.
 */
export declare function safeUrlWithDnsCheck(url: string, opts?: UrlValidationOpts): Promise<string>;
