Protected REST endpoint

WM Guard technically exposes a REST endpoint in the wm-guard/v1 namespace. While access is locked or no valid key is supplied, the endpoint responds like a nonexistent route with HTTP 404.

Key only in the header

The access key is not accepted as a URL parameter. This reduces the chance of the key being written into URL, proxy, or access logs.

Rate limit

Valid retrievals are additionally limited per IP. The current limit is 60 requests per hour and IP address.

Generate a new key

Use Generate new key to invalidate the previous key immediately. Existing retrievals using the old key will stop working.