Skip to main content

Overview

Before a site can send a proxied request to an external API, that destination must be explicitly approved for that site. This allowlist keeps the proxy tightly scoped. A site can only send requests to exact hostnames you have approved.

Endpoints

List Approved Hosts

Example

Response

Add Approved Hosts

Example

Response

Remove Approved Host

Example

Response

Rules

  • Only exact hostnames are allowed
  • Only HTTPS destinations are supported
  • Use the narrowest possible set of hosts for each site
  • Do not add wildcard-style hostnames