diff --git a/src/agents/tools/web-fetch.ssrf.test.ts b/src/agents/tools/web-fetch.ssrf.test.ts
index d7d99072439..75d9632203c 100644
--- a/src/agents/tools/web-fetch.ssrf.test.ts
+++ b/src/agents/tools/web-fetch.ssrf.test.ts
@@ -38,15 +38,23 @@ async function createWebFetchToolForTest(params?: {
   ssrfPolicy?: ssrf.SsrFPolicy;
 }) {
   const { createWebFetchTool } = await import("./web-tools.js");
+
+  // Build config with ssrfPolicy injected via tools.web.fetch.ssrfPolicy
+  const fetchConfig: Record<string, unknown> = {
+    cacheTtlMinutes: 0,
+    firecrawl: params?.firecrawl ?? { enabled: false },
+  };
+
+  // Inject ssrfPolicy via config key if provided
+  if (params?.ssrfPolicy) {
+    fetchConfig.ssrfPolicy = params.ssrfPolicy;
+  }
+
   return createWebFetchTool({
     config: {
       tools: {
         web: {
-          fetch: {
-            cacheTtlMinutes: 0,
-            firecrawl: params?.firecrawl ?? { enabled: false },
-            ...(params?.ssrfPolicy ? { ssrfPolicy: params?.ssrfPolicy } : {}),
-          },
+          fetch: fetchConfig,
         },
       },
     },