Security
Authentication Methods
Username/password gateway auth, API keys, and IP allowlisting.
Last updated: 2026-07-18
Gateway authentication
All proxy traffic uses HTTP basic auth embedded in the proxy URL or passed via client-specific authenticate methods.
REST API keys
Management API calls require bearer tokens generated in the dashboard. Rotate keys periodically and restrict scopes to required operations.
IP allowlisting
Optionally restrict gateway access to known server IPs. Allowlist changes propagate within 60 seconds across the network.
Credential rotation
Regenerate gateway passwords without downtime. Update downstream workers incrementally using rolling deployment patterns.