Docs · Validators

`url` validator

Accept anything the WHATWG URL parser accepts.

Reference

Format

Accepts any string that does not throw inside `new URL(value)`. A scheme is required — bare hostnames like `example.com` fail.

Examples

https://example.com/path?q=1
http://localhost:3000
mailto:alice@example.com (passes — any scheme)

How it runs

Implementation

Faithful summary of lib/validators.ts. Validators are pure functions and run identically in the worker, the Workbench, and the MCP server.

lib/validators.ts

function validUrl(value) {
  try { new URL(value); return OK }
  catch { return fail('url_invalid', 'not a valid URL') }
}

Config

Use in a template

Validators attach to a field on a custom template. The cascade runs them after mapping but before commit; failures surface in the per-row validation report.

template.yaml

fields:
  - column: website
    type: string
    validators:
      - type: url

Watch out

Common gotchas

Any scheme passes — `mailto:`, `javascript:`, `file:`. If you only want `https`, add a regex validator alongside.
Bare hostnames (`example.com`) fail. Templates that accept those should pre-prepend `https://` in transform.
No SSRF protection. The validator does not block private IPs, link-local, or localhost. Use `lib/ssrfGuard.ts` separately for webhook URLs.
Opt-in `strict: true` runs the value through the shared SSRF guard: only `http:` / `https:` schemes, no loopback / RFC1918 / link-local / metadata-service hosts (169.254.169.254 et al.). Failures return `ssrf_blocked`. Add `require_https: true` to reject `http://` as well, returning `url_scheme`. Default behavior is unchanged.

Catalogue

Related templates

Accountsaccounts_v1
Company-level CRM records: domain, industry, headcount, country, ARR band.
Fields: domain

Pricing

Validators run on every committed row

Validators add no AI cost — they are pure functions. Every map bills a small flat per-map fee from your prepaid token wallet ($10 minimum, shared across our suite); only columns that reach the metered LLM layer, plus any-to-any convert and reshape, bill real AI tokens. See pricing →

Explore

Other validators

regex enum date_range number_range email phone iban bic

Back to the documentation index or browse the template catalogue.

Ready when you are

Validate every row — before it lands.

Attach checksum-strict validators to any field, and gate risky commits with the requires_hitl flag. One key runs the whole cascade.

Get an API key See pricing →

Prepaid token wallet · schema-only data-minimization mode

url validator