Name

Allowed user-agent

If specified, only the requests with this substring (case-sensitive) in the User-Agent HTTP header will be processed. Useful for increasing security of your key used in custom mobile or desktop applications. Leave this field empty to allow any user-agent

Allowed origins

Put each rule on a separate line. Rules will match against Origin header. You can create rules to exact match (e.g. mydomain.com), match all subdomains (e.g. *.mydomain.com) or match 'unknown' origin requests (e.g. ?). If Origin header is not set for a request, it will be treated as 'unknown'