OMNI-MQTT-MCP

on_http_request: - name: Require valid authentication token expressions: - | !( req.headers.get('authorization') == env.AUTH_TOKEN || req.headers.get('x-api-key') == env.AUTH_TOKEN ) actions: - type: custom-response config: status_code: 401 body: "Unauthorized: Invalid or missing authentication token" headers: content-type: text/plain www-authenticate: 'Bearer realm="API"' - name: Allow whitelisted IP addresses and authorized domains expressions: - | !( conn.client_ip == '44.226.145.213' || conn.client_ip == '54.187.200.255' || conn.client_ip == '34.213.214.55' || conn.client_ip == '35.164.95.156' || conn.client_ip == '44.230.95.183' || conn.client_ip == '44.229.200.200' || 'operator.becomeomni.com' in req.headers['host'] || 'operator.staging.becomeomni.com' in req.headers['host'] || 'dev1.operator.becomeomni.com' in req.headers['host'] || 'localhost' in req.headers['host'] ) actions: - type: deny - name: Add `robots.txt` to deny all bots and crawlers expressions: - req.url.contains('/robots.txt') actions: - type: custom-response config: status_code: 200 body: "User-agent: *\r\nDisallow: /" headers: content-type: text/plain