Overview
Before a site can send a proxied request to an external API, that destination must be explicitly approved for that site. This allowlist keeps the proxy tightly scoped. A site can only send requests to exact hostnames you have approved.Endpoints
List Approved Hosts
Example
Response
Add Approved Hosts
Example
Response
Remove Approved Host
Example
Response
Rules
- Only exact hostnames are allowed
- Only HTTPS destinations are supported
- Use the narrowest possible set of hosts for each site
- Do not add wildcard-style hostnames