Egress IPs
Helios sends every webhook request from a fixed set of IPv4 addresses. Allow them in your firewall, and read the current list from this page or from the API.
Helios sends every webhook request from a fixed set of IPv4 addresses. If your endpoint sits behind a firewall, allow these addresses to reach it on port 443.
Helios connects over IPv4 only, so your endpoint needs an A record. See network for the other rules on the destination.
Current addresses
The list of addresses is published here when webhooks launch.
Read the list from the API
GET /webhooks/egress-ips returns the same list. The list can change when Helios adds capacity, so
use it to keep a firewall rule up to date. It takes the same API key as the
CLI.
curl -s "$HELIOS_SERVER/webhooks/egress-ips" \
-H "Authorization: Bearer $HELIOS_API_KEY"{ "ips": ["<address>", "<address>"] }These addresses send webhooks for every Helios organization. An allowed address alone does not prove that a request is meant for you, so always check the signature.
Last updated on
Access and ownership
The role needed for each webhook action, the rules for organization and personal targets, the 7 day rule when the admin who confirmed a URL loses access, and how payload versions are retired.
Library overview
The Library is the shared file store for your organization, its projects, and each person. Agents read it from their sandbox and propose changes that a person approves.