New Internal API Configuration

Define the credentials and security policy for the executor app.

Back
1. General
Friendly label, e.g. "Production Executor" or "Staging Executor".
Leave blank to auto-generate from the name.
2. Security Toggles
Reject calls from any IP not in the trusted list.
Require X-API-Key header on every internal request.
Require signed request payloads with replay protection.
3. Trusted Network
Comma- or newline-separated list of trusted IPs / CIDR blocks. Empty value rejects all traffic (fail-closed) when IP check is on.
4. API Credentials
Comma- or newline-separated keys. Send via header X-API-Key: <key>.
5. HMAC Security
Shared secret used to sign request payloads (HMAC-SHA256).
Max clock skew between client and server. 300 = 5 min.
6. Feature Access
Master switch for the AI Calling feature in the executor app.
Allow signed browser SSO landings on /automation/* using the HMAC Secret above.
Only one configuration may be active. Activating this one deactivates the rest.
Cancel