Which plans support restricted origins?
Free keys are intended for open server-side access. Paid plans add configurable origin allowlists.
| Plan | Restricted origins per key |
|---|---|
| Free | Not configurable |
| Starter | Up to 5 |
| Pro | Up to 10 |
What does exact matching mean?
https://app.example.com and https://www.example.com are different origins. A development port such as http://localhost:3000 must also be listed explicitly.
Can origins be edited later?
Key restrictions are fixed for that credential. Revoke and recreate the key to change its origin list, then deploy the replacement safely.