2 docs tagged with "Security"

If your site enforces a Content Security Policy (CSP), you need to allow the DataGrail consent script and its network requests in your policy headers. Without the correct directives, browsers will block the script from loading or connecting to DataGrail services.

IP Allowlisting lets Admins restrict platform access to specific IP ranges. You can restrict interactive sign-in for all users, restrict external MCP client connections, and separately restrict individual API keys or Agents to their own IP ranges.