Request access
- Accept the policies, then open Domain access in the dashboard.
- Enter the source and API hostnames you use, select Shape and describe the use case.
- Wait for approval before generating. Create an API key in the dashboard.
You can enter a domain or a full HTTP/S URL. Schemes, paths and query strings are removed from the access scope; example.com and www.example.com share approval. Approval for shop.example.com does not automatically cover api.shop.example.com. Only public HTTP/S hostnames with default ports are eligible; private networks, IP targets and credential-bearing URLs are excluded.
Review decisions
- Instant rules match the exact domain, product and selected use case. Other requests go to review.
- States: pending, approved, rejected or revoked. A resubmission cannot automatically undo rejection or revocation.
- An API key cannot override missing or revoked domain access.
New target support is a separate technical request. Approval grants access; it does not prove compatibility or target acceptance. Akamai, DataDome, Incapsula and Kasada are coming soon.