Managing Proxy Functions

Once created, proxy functions can be managed from the proxy functions page. This guide covers all management actions available.

Viewing Proxy Functions

Navigate to your project and click Proxy Functions in the sidebar. Select an environment tab to see the proxy functions for that environment.

The proxy list shows:

ColumnDescription
NameThe proxy name and description
Target URLThe third-party API endpoint
MethodThe HTTP method (GET, POST, PUT, DELETE)
StatusActive (green) or Disabled (red)
CreatedWhen the proxy was created
TemplateWhether the proxy was created from a template

Use the search bar to filter proxies by name or target URL.

Quick Actions

Each proxy row has two quick-action buttons:

  • Copy URL (link icon) -- copies the hosted proxy URL to your clipboard
  • Test (play icon) -- opens the test panel

Click the three-dot menu on a proxy row to access additional actions.

Edit

Opens the proxy configuration form with all current settings pre-filled. Make changes and click Update Proxy to save. Available to admins and owners only.

Enable / Disable

Toggles the proxy between active and disabled states.

  • Active -- the proxy accepts and forwards requests normally
  • Disabled -- the proxy rejects all incoming requests. This is useful for temporarily taking a proxy offline without deleting it

Available to admins and owners only.

Copy Token

Copies the proxy's secret token to your clipboard. Use this token in the x-proxy-token header when calling the proxy from your frontend.

Download Code

Opens the download modal to generate platform-specific code for self-hosting.

Regenerate Token

Generates a new secret token for the proxy. The old token is immediately invalidated.

Regenerating a token will break any frontend code that uses the old token. Update the token in your frontend code after regenerating.

Available to admins and owners only.

Delete

Permanently removes the proxy function. A confirmation dialog appears before deletion. The proxy endpoint immediately stops working.

Deleted proxies are logged in the audit trail for compliance purposes.

Available to admins and owners only.

Security Best Practices

Proxy Tokens

Each proxy function has its own unique secret token. Treat this token like an API key:

  • Do not commit proxy tokens to version control
  • Use environment variables in your frontend to store the token
  • Regenerate the token if you suspect it has been compromised

Allowed Origins

For production proxies, always configure specific allowed origins rather than using the wildcard *. This prevents unauthorized websites from calling your proxy.

Disabling vs Deleting

If you need to temporarily stop a proxy from working (during maintenance, after a security incident, etc.), disable it rather than deleting it. Disabling preserves the configuration so you can re-enable it later.

Role Permissions

ActionOwnerAdminMemberViewer
View proxy functionsYesYesYesYes
Copy URL / TokenYesYesYesYes
Test proxyYesYesYesYes
Download codeYesYesYesYes
Create proxyYesYesNoNo
Edit proxyYesYesNoNo
Enable / DisableYesYesNoNo
Regenerate tokenYesYesNoNo
Delete proxyYesYesNoNo

Get DevOps tips in your inbox

Security best practices and product updates. No spam.

No spam. Unsubscribe anytime.