Allowed URLs Checker for API Keys

A new tool in the dashboard lets you test whether a given URL is permitted by an API key's allowed-URLs configuration. Catch misconfigured patterns before they break a production integration.

Details

• Live check: Paste any URL and see whether it would be accepted by the key
• Wildcard correctness: Subdomain wildcards now require a dot boundary, so *.example.com no longer accidentally matches evilexample.com
• Clearer messaging: Improved guidance when a URL is rejected, indicating which rule failed