diff --git a/backend/internal/config/config.go b/backend/internal/config/config.go
index 1d8c64ef..c1b6ddb1 100644
--- a/backend/internal/config/config.go
+++ b/backend/internal/config/config.go
@@ -413,6 +413,9 @@ func setDefaults() {
 	viper.SetDefault("security.url_allowlist.upstream_hosts", []string{
 		"api.openai.com",
 		"api.anthropic.com",
+		"api.kimi.com",
+		"open.bigmodel.cn",
+		"api.minimaxi.com",
 		"generativelanguage.googleapis.com",
 		"cloudcode-pa.googleapis.com",
 		"*.openai.azure.com",
diff --git a/deploy/config.example.yaml b/deploy/config.example.yaml
index 7b2c7d39..0d82006d 100644
--- a/deploy/config.example.yaml
+++ b/deploy/config.example.yaml
@@ -41,6 +41,9 @@ security:
     upstream_hosts:
       - "api.openai.com"
       - "api.anthropic.com"
+      - "api.kimi.com"
+      - "open.bigmodel.cn"
+      - "api.minimaxi.com"
       - "generativelanguage.googleapis.com"
       - "cloudcode-pa.googleapis.com"
       - "*.openai.azure.com"