Define the exposure level
A webhook endpoint may need to remain public whereas a team preview can be restricted.
HTTP protection
Restrict access to an HTTP URL
Choose the HTTP control suitable for a demo, pre-production, or application reserved for a known group.
Choose a control
Use a CIDR list, password, or identity provider depending on your context.
Test with a separate session
Verify that an unauthorized visitor receives the expected access behavior.
Review requests
Inspector helps distinguish expected integration calls from regular visits.
Need another starting point?
Open documentation