Source: https://fyno.docs.pageloop.ai/documentation/settings/workspace-settings/allowlist/http

# HTTP

The **HTTP Allowlist** option lets you register and verify external HTTP or HTTPS endpoints that can securely interact with the platform. Once verified, these endpoints can be used for workflows, integrations, callbacks, and delivery reporting.
![](/images/allowlist-http.png)

## Steps to Add an HTTP Allowlist:

1. Navigate to **Workspace Settings > Allowlist**.
2. Click **Add**, the **Add Allowlist** screen opens.
3. Select the **HTTP** option from the available allowlist types.
4. Enter a **Custom URL Name** and **URL** for the Allowlist.

## Verification Method

The **Verification Method** section determines how ownership or access to the provided URL is validated before the endpoint is allowlisted.

Three verification methods are available:

| Verification Method       | Description                                                                 | Approval Time          |
| ------------------------- | --------------------------------------------------------------------------- | ---------------------- |
| **DNS Verification**      | Verifies domain ownership using a DNS TXT record.                           | 15 minutes to 24 hours |
| **Web Token**             | Verifies the endpoint by validating a token returned from the URL response. | Less than 1 minute     |
| **Send for Verification** | Submits the URL for manual review and approval by the Fyno team.            | 8 hours to 2 days      |

## DNS Verification

Use **DNS Verification** when you have access to your domain’s DNS configuration.
![](/images/verification-http.png)
When you select **DNS Verification**, the system generates a verification TXT record to confirm domain ownership.

### Steps

1. Select **DNS Verification**.
2. Copy the generated TXT record using the copy icon.
3. Add the TXT record to your domain's DNS configuration through your DNS provider.
4. Wait for the DNS changes to propagate.
5. Click **Next** to verify the domain ownership.

Once the record is detected, the verification is completed automatically.

## Web Token Verification

Use **Web Token Verification** when the endpoint can read query parameters and return the token value in the response.
![](/images/web-token.png)

### How It Works

When you select **Web Token Verification**, the platform sends a request to the specified endpoint with a `fyno_token` query parameter.

To complete verification, the endpoint must:

- Read the token value from the request.
- Return the same token value in the response.

Once the returned token matches the generated token, the endpoint is verified successfully.

### Steps

1. Select **Web Token Verification**.
2. Optionally enter a custom token value.
3. Configure the endpoint to:
   - Read the `fyno_token` query parameter from the request.
   - Return the same token value in the response.
4. Click **Next** to initiate verification.

Once the token is validated, the endpoint is verified automatically.

### Token Field

| Field                | Description                                                                                                                                                                                                                                            |
| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Token (Optional)** | An optional custom alphanumeric token that is added as a `user_token` query parameter during verification. This helps identify that the verification request originated from Fyno and can be used for additional validation on the receiving endpoint. |

## Send for Verification

Use this option when **DNS** or **Web Token** verification cannot be configured.
![](/images/send-for-verification.png)

### How It Works

The provided URL is submitted for manual verification and approval by the Fyno team.

### Steps

1. Select **Send for Verification**.
2. Enter a detailed description explaining (optional):
   - Why the URL needs to be allowlisted.
   - The intended use case.
   - Any relevant integration details.
3. Click **Next** to configure the endpoint and submit the request for verification.