---
title: "Internet access from your app: the while.sh docs"
url: https://while.sh/en/docs/building-blocks/outbound-traffic/
updated: 2026-11-09
---

# Outbound traffic

The internet is closed to your app by default. It calls an external API through a connection, and the internet opens after approval.

> You, to your agent: Let the app call the weather API.

## What your agent writes

Your agent writes it in while.yaml, at the root of your app:

```yaml titre="while.yaml"
network:
  egress: all
```

## When to use it

Use it when the app must reach the Internet outside a declared connection. Opening it requires approval, because `egress` is closed by default.

## How it works

The Internet is closed to an app by default: to call an external API, it goes through a connection. `network: { egress: all }` opens the Internet to it, according to the organization's rules.

## What to know

Without `egress: all` (with none, an allow list or nothing declared), `egress` is closed: an allow list opens nothing directly, and its calls go through a connection. `egress: all` opens the Internet directly, over IPv6 as over IPv4 (TCP and UDP), except the platform's internal networks and port 25 (SMTP). A version already online keeps its previous `egress` until its next deployment. Over IPv4, the app goes out through 85.208.145.210, 85.208.145.211: declare these addresses to any third party that filters by IP address. An app reaches neither while's API nor its MCP (`app.while.sh`, `mcp.while.sh`).

Without `egress: all`, an external API is reached through a connection (`declare_connection`, even with a project token): a person approves it, and while calls it for the app, over IPv6 as over IPv4.

## Guides

- [Connect Stripe, Brevo or any API to your app with no key in the code, from your AI agent](/en/guides/api-keys-out-of-code/)