Cut an outbound domain for an app
dropyour_egress_denyCut a host your graduated app is calling — in ONE call, taking effect on the next request, with NO republish. This is the verb for the moment you read in dropyour_logs that a key is leaving toward something you did not intend. It OVERRIDES your app's own declaration: a host written literally in your code, or named by a secret, is normally reachable — listed here, it is refused, and the refusal is named hôte_refusé_par_le_propriétaire so your agent does not go edit code that has nothing wrong with it. Pass remove: true to lift it. Up to 32 patterns, same host grammar as secrets (leading *. wildcard allowed). Tier 4 only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Host or pattern to cut, e.g. api.example.com or *.example.com. | |
| dropId | Yes | ||
| remove | No | true lifts the cut instead of adding it. | |
| managementToken | No |