Interface PluginPermissions

Hostnames the provider may contact. *.example.com matches any subdomain and the apex. Enforced on the upstream host, before any relay rewrite.

Wildcards exist for providers whose data host is tenant-specific and therefore unknowable at build time (e.g. *.sharepoint.com).

Hostnames whose content may be fetched with ctx.fetchPublic — that is, pre-signed URLs that must be requested without credentials. Kept separate from network so a provider cannot accidentally widen the set of hosts its authenticated requests can reach.

Declares that this provider's API sends no CORS headers and must be reached through a same-origin path the app's own server forwards upstream. The host validates the declaration against the relay routes it actually has configured and refuses to register the provider otherwise, so a relay can never be silently missing in production.