diff --git a/docs/inference/custom-endpoint-security.mdx b/docs/inference/custom-endpoint-security.mdx
index 203eba7a3bf..dcc1702172d 100644
--- a/docs/inference/custom-endpoint-security.mdx
+++ b/docs/inference/custom-endpoint-security.mdx
@@ -27,8 +27,12 @@ Use a non-empty placeholder such as `dummy` for an unauthenticated Anthropic-com
 ## Understand URL Validation
 
 Explicit endpoint URLs saved through Hermes Provider setup, `inference set`, host-side `config set`, or a direct blueprint run must pass host-side server-side request forgery validation.
-NemoClaw rejects loopback, link-local, private, and internal addresses in these paths.
-It also rejects public hostnames that resolve to a private address.
+NemoClaw rejects loopback, link-local, private, internal, reserved, and special-purpose addresses in these paths.
+Blocked special-purpose targets include documentation, translation, benchmarking, multicast, and metadata destinations.
+It also rejects public hostnames that resolve to a blocked address.
+
+A direct blueprint run rejects endpoint URLs that contain userinfo, such as an embedded username or password, before DNS resolution.
+Configure the provider credential separately instead of putting it in the endpoint URL.
 
 Managed provider defaults that do not provide an explicit custom endpoint through these paths are unaffected.
 
diff --git a/nemoclaw-blueprint/private-networks.yaml b/nemoclaw-blueprint/private-networks.yaml
index 3081d0eab7f..c1b8975e310 100644
--- a/nemoclaw-blueprint/private-networks.yaml
+++ b/nemoclaw-blueprint/private-networks.yaml
@@ -62,9 +62,21 @@ ipv4:
   - address: 192.0.2.0
     prefix: 24
     purpose: TEST-NET-1 documentation
+  - address: 192.31.196.0
+    prefix: 24
+    purpose: AS112 DNS anycast (RFC 7535)
+  - address: 192.52.193.0
+    prefix: 24
+    purpose: AMT relay anycast (RFC 7450)
+  - address: 192.88.99.0
+    prefix: 24
+    purpose: Deprecated 6to4 relay anycast (RFC 7526)
   - address: 192.168.0.0
     prefix: 16
     purpose: Private /16 (home/small-network default)
+  - address: 192.175.48.0
+    prefix: 24
+    purpose: AS112 direct delegation anycast (RFC 7534)
   - address: 198.18.0.0
     prefix: 15
     purpose: Benchmark testing
@@ -87,6 +99,9 @@ ipv6:
   - address: "::1"
     prefix: 128
     purpose: Loopback
+  - address: "::"
+    prefix: 96
+    purpose: Deprecated IPv4-compatible encodings that can hide private IPv4 targets
   - address: "64:ff9b::"
     prefix: 96
     purpose: NAT64 well-known prefix
@@ -96,21 +111,36 @@ ipv6:
   - address: "100::"
     prefix: 64
     purpose: Discard prefix
+  - address: "100:0:0:1::"
+    prefix: 64
+    purpose: Dummy IPv6 Prefix (IANA non-forwardable)
   - address: "2001::"
-    prefix: 32
-    purpose: Teredo tunneling
+    prefix: 23
+    purpose: IETF protocol assignments (Teredo, benchmarking, ORCHID, and related special-purpose space)
   - address: "2001:db8::"
     prefix: 32
     purpose: Documentation
   - address: "2002::"
     prefix: 16
     purpose: 6to4
+  - address: "2620:4f:8000::"
+    prefix: 48
+    purpose: AS112 IPv6 anycast (RFC 7534)
+  - address: "3fff::"
+    prefix: 20
+    purpose: Documentation (RFC 9637)
+  - address: "5f00::"
+    prefix: 16
+    purpose: IPv6 Segment Routing (SRv6) SIDs (RFC 9602)
   - address: "fc00::"
     prefix: 7
     purpose: Unique local addresses
   - address: "fe80::"
     prefix: 10
     purpose: Link-local
+  - address: "fec0::"
+    prefix: 10
+    purpose: Deprecated site-local addresses
   - address: "ff00::"
     prefix: 8
     purpose: Multicast
@@ -121,3 +151,5 @@ names:
     purpose: RFC 6762 mDNS link-local names (Bonjour / Avahi / zeroconf)
   - name: internal
     purpose: ICANN-reserved private-use TLD (2024-02-11 Board Resolution)
+  - name: metadata
+    purpose: Cloud instance metadata service hostname alias
diff --git a/nemoclaw/src/blueprint/private-networks.ts b/nemoclaw/src/blueprint/private-networks.ts
index f60dc52881e..6ff34cd98f4 100644
--- a/nemoclaw/src/blueprint/private-networks.ts
+++ b/nemoclaw/src/blueprint/private-networks.ts
@@ -219,7 +219,7 @@ export function resetCache(): void {
  *
  * IPv4-mapped IPv6 addresses (::ffff:a.b.c.d) are auto-matched against
  * IPv4 rules by node:net BlockList, so no explicit handling is needed.
- * NAT64, 6to4, and Teredo prefixes are blocked by prefix in the YAML
+ * NAT64, 6to4, and IETF special-purpose prefixes are blocked by prefix in the YAML
  * because BlockList does not extract embedded IPv4 from those forms.
  */
 export function isPrivateIp(address: string): boolean {
diff --git a/nemoclaw/src/blueprint/ssrf.test.ts b/nemoclaw/src/blueprint/ssrf.test.ts
index 17e851b7c16..b40dd1b2553 100644
--- a/nemoclaw/src/blueprint/ssrf.test.ts
+++ b/nemoclaw/src/blueprint/ssrf.test.ts
@@ -406,12 +406,73 @@ describe("validateEndpointUrl – URL parsing edge cases", () => {
     expect(() => safeEndpointUrlForDownstream(result)).toThrow(/DNS-backed HTTPS endpoint/);
   });
 
-  it("parses URL with userinfo/basic auth but does not mark DNS-backed HTTPS downstream-safe", async () => {
-    mockPublicDns();
-    // URL parser extracts hostname correctly even with userinfo.
-    const url = "https://user:pass@api.example.com/v1";
-    const result = await validateEndpointUrl(url);
-    expect(result.url).toBe(url);
-    expect(() => safeEndpointUrlForDownstream(result)).toThrow(/DNS-backed HTTPS endpoint/);
+  it("rejects URL with userinfo/basic auth credentials", async () => {
+    mockLookup.mockClear();
+    const cases = [
+      {
+        url: "https://alice:s3cret-token@api.example.com/v1",
+        secrets: ["alice", "s3cret-token", "alice:s3cret-token"],
+      },
+      {
+        url: "http://alice:s3cret-token@api.example.com/v1",
+        secrets: ["alice", "s3cret-token", "alice:s3cret-token"],
+      },
+      {
+        url: "https://only-alice@api.example.com/v1",
+        secrets: ["only-alice"],
+      },
+      {
+        url: "https://:only-s3cret@api.example.com/v1",
+        secrets: ["only-s3cret"],
+      },
+    ] as const;
+
+    for (const { url, secrets } of cases) {
+      let thrown: unknown;
+      try {
+        await validateEndpointUrl(url);
+      } catch (error) {
+        thrown = error;
+      }
+      expect(thrown).toBeInstanceOf(Error);
+      const message = thrown instanceof Error ? thrown.message : String(thrown);
+      expect(message).toMatch(/must not contain credentials/);
+      for (const secret of secrets) {
+        expect(message).not.toContain(secret);
+      }
+    }
+    expect(mockLookup).not.toHaveBeenCalled();
+  });
+
+  it("does not expose credentials from malformed endpoint URLs", async () => {
+    mockLookup.mockClear();
+    const cases = [
+      {
+        url: "https://alice:s3cret-token@",
+        secrets: ["alice", "s3cret-token", "alice:s3cret-token"],
+      },
+      {
+        url: "https://alice:s3cret-token@/",
+        secrets: ["alice", "s3cret-token", "alice:s3cret-token"],
+      },
+      { url: "https://:only-s3cret@", secrets: ["only-s3cret"] },
+      { url: "https://only-alice@", secrets: ["only-alice"] },
+    ] as const;
+
+    for (const { url, secrets } of cases) {
+      let thrown: unknown;
+      try {
+        await validateEndpointUrl(url);
+      } catch (error) {
+        thrown = error;
+      }
+      expect(thrown).toBeInstanceOf(Error);
+      const message = thrown instanceof Error ? thrown.message : String(thrown);
+      expect(message).toMatch(/No hostname found in URL/);
+      for (const secret of secrets) {
+        expect(message).not.toContain(secret);
+      }
+    }
+    expect(mockLookup).not.toHaveBeenCalled();
   });
 });
diff --git a/nemoclaw/src/blueprint/ssrf.ts b/nemoclaw/src/blueprint/ssrf.ts
index 791f4b89f45..ca1414a506e 100644
--- a/nemoclaw/src/blueprint/ssrf.ts
+++ b/nemoclaw/src/blueprint/ssrf.ts
@@ -46,7 +46,7 @@ export async function validateEndpointUrl(url: string): Promise<ValidatedEndpoin
   try {
     parsed = new URL(url);
   } catch {
-    throw new Error(`No hostname found in URL: ${url}`);
+    throw new Error("No hostname found in URL.");
   }
 
   if (!ALLOWED_SCHEMES.has(parsed.protocol)) {
@@ -60,6 +60,11 @@ export async function validateEndpointUrl(url: string): Promise<ValidatedEndpoin
   if (!hostname) {
     throw new Error(`No hostname found in URL: ${url}`);
   }
+  if (parsed.username !== "" || parsed.password !== "") {
+    throw new Error(
+      "Endpoint URL must not contain credentials. Remove the username and password from the URL.",
+    );
+  }
   if (isPrivateHostname(hostname)) {
     throw new Error(
       `Endpoint URL points to private/internal address ${hostname}. ` +
diff --git a/src/lib/private-networks.ts b/src/lib/private-networks.ts
index 2d3c09a8829..88f9d626caa 100644
--- a/src/lib/private-networks.ts
+++ b/src/lib/private-networks.ts
@@ -158,7 +158,7 @@ export function resetCache(): void {
  *
  * IPv4-mapped IPv6 addresses (::ffff:a.b.c.d) are auto-matched against
  * IPv4 rules by node:net BlockList, so no explicit handling is needed.
- * NAT64, 6to4, and Teredo prefixes are blocked by prefix in the YAML
+ * NAT64, 6to4, and IETF special-purpose prefixes are blocked by prefix in the YAML
  * because BlockList does not extract embedded IPv4 from those forms.
  */
 export function isPrivateIp(address: string): boolean {
diff --git a/src/lib/security/mcp-url-target.ts b/src/lib/security/mcp-url-target.ts
index 8f11b9854df..4dab6d8b62a 100644
--- a/src/lib/security/mcp-url-target.ts
+++ b/src/lib/security/mcp-url-target.ts
@@ -45,6 +45,8 @@ for (const [address, prefix] of [
   ["64:ff9b::", 96],
   ["64:ff9b:1::", 48],
   ["100::", 64],
+  // IANA Dummy IPv6 Prefix — outside 100::/64, so listed separately.
+  ["100:0:0:1::", 64],
   // IETF protocol assignments including Teredo, benchmarking, ORCHID, and
   // other non-global special-purpose destinations.
   ["2001::", 23],
diff --git a/test/mcp-url-target.test.ts b/test/mcp-url-target.test.ts
index 3d578de6eff..7365ad4f4fe 100644
--- a/test/mcp-url-target.test.ts
+++ b/test/mcp-url-target.test.ts
@@ -3,6 +3,7 @@
 
 import { describe, expect, it } from "vitest";
 
+import { isPrivateHostname } from "../src/lib/private-networks";
 import { isBlockedMcpUrlTargetHost } from "../src/lib/security/mcp-url-target";
 
 describe("MCP URL target special-use filtering", () => {
@@ -23,6 +24,7 @@ describe("MCP URL target special-use filtering", () => {
     "3fff::1",
     "5f00::1",
     "fec0::1",
+    "100:0:0:1::1",
   ])("blocks non-global special-purpose address %s", (address) => {
     expect(isBlockedMcpUrlTargetHost(address)).toBe(true);
   });
@@ -35,3 +37,25 @@ describe("MCP URL target special-use filtering", () => {
     expect(isBlockedMcpUrlTargetHost(address)).toBe(false);
   });
 });
+
+describe("MCP and private-networks.yaml SSRF denylist parity", () => {
+  it.each([
+    "192.31.196.1",
+    "192.52.193.1",
+    "192.88.99.1",
+    "192.175.48.1",
+    "::7f00:1",
+    "2001:2::1",
+    "2001:20::1",
+    "2620:4f:8000::1",
+    "3fff::1",
+    "5f00::1",
+    "fec0::1",
+    "100:0:0:1::1",
+    "metadata",
+    "foo.metadata",
+  ])("blocks MCP-denied target %s in shared private-networks rules", (address) => {
+    expect(isBlockedMcpUrlTargetHost(address)).toBe(true);
+    expect(isPrivateHostname(address)).toBe(true);
+  });
+});
diff --git a/test/package-contract/ssrf-parity.test.ts b/test/package-contract/ssrf-parity.test.ts
index 518d11c9180..704164e42e4 100644
--- a/test/package-contract/ssrf-parity.test.ts
+++ b/test/package-contract/ssrf-parity.test.ts
@@ -179,6 +179,27 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["192.0.2.192", true, "192.0.2.0/24 three-quarter"],
     ["192.0.1.255", false, "192.0.2.0/24 before-start"],
     ["192.0.3.0", false, "192.0.2.0/24 after-end"],
+    // 192.31.196.0/24 — AS112 DNS anycast
+    ["192.31.196.0", true, "192.31.196.0/24 start"],
+    ["192.31.196.255", true, "192.31.196.0/24 end"],
+    ["192.31.196.64", true, "192.31.196.0/24 quarter"],
+    ["192.31.196.192", true, "192.31.196.0/24 three-quarter"],
+    ["192.31.195.255", false, "192.31.196.0/24 before-start"],
+    ["192.31.197.0", false, "192.31.196.0/24 after-end"],
+    // 192.52.193.0/24 — AMT relay anycast
+    ["192.52.193.0", true, "192.52.193.0/24 start"],
+    ["192.52.193.255", true, "192.52.193.0/24 end"],
+    ["192.52.193.64", true, "192.52.193.0/24 quarter"],
+    ["192.52.193.192", true, "192.52.193.0/24 three-quarter"],
+    ["192.52.192.255", false, "192.52.193.0/24 before-start"],
+    ["192.52.194.0", false, "192.52.193.0/24 after-end"],
+    // 192.88.99.0/24 — Deprecated 6to4 relay anycast
+    ["192.88.99.0", true, "192.88.99.0/24 start"],
+    ["192.88.99.255", true, "192.88.99.0/24 end"],
+    ["192.88.99.64", true, "192.88.99.0/24 quarter"],
+    ["192.88.99.192", true, "192.88.99.0/24 three-quarter"],
+    ["192.88.98.255", false, "192.88.99.0/24 before-start"],
+    ["192.88.100.0", false, "192.88.99.0/24 after-end"],
     // 192.168.0.0/16 — Private /16
     ["192.168.0.0", true, "192.168.0.0/16 start"],
     ["192.168.255.255", true, "192.168.0.0/16 end"],
@@ -186,6 +207,13 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["192.168.192.0", true, "192.168.0.0/16 three-quarter"],
     ["192.167.255.255", false, "192.168.0.0/16 before-start"],
     ["192.169.0.0", false, "192.168.0.0/16 after-end"],
+    // 192.175.48.0/24 — AS112 direct delegation anycast
+    ["192.175.48.0", true, "192.175.48.0/24 start"],
+    ["192.175.48.255", true, "192.175.48.0/24 end"],
+    ["192.175.48.64", true, "192.175.48.0/24 quarter"],
+    ["192.175.48.192", true, "192.175.48.0/24 three-quarter"],
+    ["192.175.47.255", false, "192.175.48.0/24 before-start"],
+    ["192.175.49.0", false, "192.175.48.0/24 after-end"],
     // 198.18.0.0/15 — Benchmark
     ["198.18.0.0", true, "198.18.0.0/15 start"],
     ["198.19.255.255", true, "198.18.0.0/15 end"],
@@ -224,12 +252,16 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["244.0.0.0", true, "240.0.0.0/4 quarter"],
     ["252.0.0.0", true, "240.0.0.0/4 three-quarter"],
     // ::/128 — Unspecified. No before-start (0 is the minimum IPv6
-    // address). No after-end vector: ::1 is the next blocked CIDR.
+    // address). Covered again by ::/96 below.
     ["::", true, "::/128 start"],
-    // ::1/128 — Loopback. No before-start vector: :: is the start of
-    // the previous block.
+    // ::1/128 — Loopback. Also covered by ::/96.
     ["::1", true, "::1/128 start"],
-    ["::2", false, "::1/128 after-end"],
+    // ::/96 — Deprecated IPv4-compatible encodings
+    ["::", true, "::/96 start"],
+    ["::ffff:ffff", true, "::/96 end"],
+    ["::4000:0", true, "::/96 quarter"],
+    ["::c000:0", true, "::/96 three-quarter"],
+    ["0:0:0:0:0:1::", false, "::/96 after-end"],
     // 64:ff9b::/96 — NAT64 well-known
     ["64:ff9b::", true, "64:ff9b::/96 start"],
     ["64:ff9b::ffff:ffff", true, "64:ff9b::/96 end"],
@@ -250,14 +282,21 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["100::4000:0:0:0", true, "100::/64 quarter"],
     ["100::c000:0:0:0", true, "100::/64 three-quarter"],
     ["ff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "100::/64 before-start"],
-    ["100:0:0:1::", false, "100::/64 after-end"],
-    // 2001::/32 — Teredo
-    ["2001::", true, "2001::/32 start"],
-    ["2001:0:ffff:ffff:ffff:ffff:ffff:ffff", true, "2001::/32 end"],
-    ["2001:0:4000::", true, "2001::/32 quarter"],
-    ["2001:0:c000::", true, "2001::/32 three-quarter"],
-    ["2000:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "2001::/32 before-start"],
-    ["2001:1::", false, "2001::/32 after-end"],
+    ["100:0:1::", false, "100::/64 after-end"],
+    // 100:0:0:1::/64 — Dummy IPv6 Prefix. No before-start vector: the
+    // previous hextet is covered by the 100::/64 discard prefix.
+    ["100:0:0:1::", true, "100:0:0:1::/64 start"],
+    ["100:0:0:1:ffff:ffff:ffff:ffff", true, "100:0:0:1::/64 end"],
+    ["100:0:0:1:4000:0:0:0", true, "100:0:0:1::/64 quarter"],
+    ["100:0:0:1:c000:0:0:0", true, "100:0:0:1::/64 three-quarter"],
+    ["100:0:0:2::", false, "100:0:0:1::/64 after-end"],
+    // 2001::/23 — IETF protocol assignments (includes Teredo)
+    ["2001::", true, "2001::/23 start"],
+    ["2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff", true, "2001::/23 end"],
+    ["2001:80::", true, "2001::/23 quarter"],
+    ["2001:180::", true, "2001::/23 three-quarter"],
+    ["2000:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "2001::/23 before-start"],
+    ["2001:200::", false, "2001::/23 after-end"],
     // 2001:db8::/32 — Documentation
     ["2001:db8::", true, "2001:db8::/32 start"],
     ["2001:db8:ffff:ffff:ffff:ffff:ffff:ffff", true, "2001:db8::/32 end"],
@@ -272,6 +311,27 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["2002:c000::", true, "2002::/16 three-quarter"],
     ["2001:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "2002::/16 before-start"],
     ["2003::", false, "2002::/16 after-end"],
+    // 2620:4f:8000::/48 — AS112 IPv6 anycast
+    ["2620:4f:8000::", true, "2620:4f:8000::/48 start"],
+    ["2620:4f:8000:ffff:ffff:ffff:ffff:ffff", true, "2620:4f:8000::/48 end"],
+    ["2620:4f:8000:4000::", true, "2620:4f:8000::/48 quarter"],
+    ["2620:4f:8000:c000::", true, "2620:4f:8000::/48 three-quarter"],
+    ["2620:4f:7fff:ffff:ffff:ffff:ffff:ffff", false, "2620:4f:8000::/48 before-start"],
+    ["2620:4f:8001::", false, "2620:4f:8000::/48 after-end"],
+    // 3fff::/20 — Documentation
+    ["3fff::", true, "3fff::/20 start"],
+    ["3fff:fff:ffff:ffff:ffff:ffff:ffff:ffff", true, "3fff::/20 end"],
+    ["3fff:400::", true, "3fff::/20 quarter"],
+    ["3fff:c00::", true, "3fff::/20 three-quarter"],
+    ["3ffe:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "3fff::/20 before-start"],
+    ["3fff:1000::", false, "3fff::/20 after-end"],
+    // 5f00::/16 — SRv6 SIDs
+    ["5f00::", true, "5f00::/16 start"],
+    ["5f00:ffff:ffff:ffff:ffff:ffff:ffff:ffff", true, "5f00::/16 end"],
+    ["5f00:4000::", true, "5f00::/16 quarter"],
+    ["5f00:c000::", true, "5f00::/16 three-quarter"],
+    ["5eff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "5f00::/16 before-start"],
+    ["5f01::", false, "5f00::/16 after-end"],
     // fc00::/7 — Unique local
     ["fc00::", true, "fc00::/7 start"],
     ["fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", true, "fc00::/7 end"],
@@ -279,19 +339,26 @@ describe("CLI and plugin isPrivateHostname agree on every CIDR boundary", () =>
     ["fd80::", true, "fc00::/7 three-quarter"],
     ["fbff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "fc00::/7 before-start"],
     ["fe00::", false, "fc00::/7 after-end"],
-    // fe80::/10 — Link-local
+    // fe80::/10 — Link-local. No after-end vector: fec0:: is the start
+    // of the next blocked site-local block.
     ["fe80::", true, "fe80::/10 start"],
     ["febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff", true, "fe80::/10 end"],
     ["fe90::", true, "fe80::/10 quarter"],
     ["feb0::", true, "fe80::/10 three-quarter"],
     ["fe7f:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "fe80::/10 before-start"],
-    ["fec0::", false, "fe80::/10 after-end"],
-    // ff00::/8 — Multicast
+    // fec0::/10 — Deprecated site-local. No before-start vector: febf:: is
+    // the end of the previous link-local block. No after-end: ff00:: starts
+    // multicast.
+    ["fec0::", true, "fec0::/10 start"],
+    ["feff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", true, "fec0::/10 end"],
+    ["fed0::", true, "fec0::/10 quarter"],
+    ["fef0::", true, "fec0::/10 three-quarter"],
+    // ff00::/8 — Multicast. No before-start vector: feff:: is the end of
+    // the previous site-local block.
     ["ff00::", true, "ff00::/8 start"],
     ["ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", true, "ff00::/8 end"],
     ["ff40::", true, "ff00::/8 quarter"],
     ["ffc0::", true, "ff00::/8 three-quarter"],
-    ["feff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", false, "ff00::/8 before-start"],
   ];
 
   for (const [addr, expected, label] of vectors) {
@@ -324,8 +391,11 @@ describe("CLI and plugin isPrivateHostname agree on wrapper-level cases", () =>
     ["printer.local", true, "RFC 6762 mDNS .local"],
     ["PRINTER.LOCAL.", true, "mDNS .local uppercase with trailing dot"],
     ["my-vm.c.my-project.internal", true, "ICANN-reserved .internal subdomain"],
+    ["metadata", true, "cloud metadata reserved name"],
+    ["instance.metadata", true, "*.metadata subdomain"],
     ["local.example.com", false, "'.local' as a non-final label"],
     ["internal.example.com", false, "'.internal' as a non-final label"],
+    ["metadata.example.com", false, "'.metadata' as a non-final label"],
     ["example.com", false, "DNS name"],
     ["not-an-ip", false, "garbage"],
     ["", false, "empty"],