Security and access boundaries

Only reviewed operations in this reference are supported for external integration. Unclassified routes and internal control-plane capabilities are absent from the site, search, exports, sitemap, and machine-readable indexes.

Choose the narrowest environment, product scope, permission, account, platform, and origin set that can complete the workflow.

Never ship secret credentials in web bundles, browser extensions, iOS apps, Android apps, or React Native packages. Route privileged actions through a trusted backend.

Do not disclose suspected vulnerabilities in a public issue. Use Beladed's security contact from the Security Center.