Skip to main content
PUT
Set the authorized-source allowlist for the caller's personal API key

Authorizations

Authorization
string
header
required

JWT token passed in authorization header

Body

application/json
allowedSources
string[]
Maximum array length: 20
Example:
enforceSources
boolean

When false (default), a non-matching sign-in still succeeds and is only audited (warn-first rollout). When true, non-matching sign-ins are rejected with 403.

Example:

false

Response

Saved

success
boolean
allowedSources
string[]
enforceSources
boolean
mixed
boolean

True when the list mixes origin and network entries.