The security endpoints provide essential functionality for managing API access, IP whitelisting, and monitoring the health of the API gateway. These endpoints are crucial for maintaining a secure and controlled environment for your API integrations.

IP Whitelist

Manage IP whitelisting for your API keys. This endpoint allows you to add IP addresses that are authorized to make API calls, providing an additional layer of security.

Key Profile

View detailed information about your API keys, including permissions, associated users, and usage statistics. Essential for monitoring and auditing API access.

Health Check

Monitor the status and availability of the API gateway. This public endpoint helps you verify that the service is operational and responding correctly.

Remove Whitelisted IP

Remove IP addresses from the whitelist when they are no longer needed or when you need to revoke access. Important for maintaining security when IP addresses change.

​
Security Considerations

When working with these endpoints, keep in mind:
  1. IP Whitelisting: Always whitelist only the necessary IP addresses to minimize the attack surface
  2. API Key Management: Rotate API keys periodically and remove unused keys
  3. Monitoring: Use the health check endpoint to monitor service availability
  4. Audit Trail: Regularly review key profiles to track API usage and detect any suspicious activity
For additional security features or custom requirements, please contact our support team at compliance@woodcore.co