---
updatedAt: 2025-06-10T21:52:35.000Z
agentTools:
  projectIndex: https://docs.videoflow.io/llms.txt
---

# Allowlisting

Stream Engine implements an allowlist (whitelist) mechanism that limits API access to the platform. This means that you must allowlist domains that access the platform. Also, if you use Postman, see the instructions in this article.

**To allowlist domains**:

1. In Stream Engine, go to **Channels**.
2. In a given channel, click ... (options) > **Settings**.
3. Go to **Custom Domain** > **Whitelist Domain**
4. Enter the domain name. For example, **docs.videoflow\.io**

   <Image align="left" className="border" border={true} src="https://files.readme.io/bbaaec062643a0fd6e8d683ca07936dd29f299c2a1b47fca23e1ff40726eac3e-domain.png" />
5. Click **Done**.

## Allowlist the Stream Engine docs domain

To test the API within the Stream Engine docs, you must allowlist the docs domain. To do so:

In Stream Engine, go to **Channels**.

1. In a given channel, click ... (options) > **Settings**.
2. Go to **Custom Domain** > **Whitelist Domain**
3. Enter the domain name: **docs.videoflow\.io**
4. Click **Done**.

## Using Postman

Postman can be used to test the Stream Engine API but you must set the Origin header.

**To set the origin header in Postman**:

1. In Postman, set up the API.
2. In the **Headers** tab, add a header with the key `Origin` and vaule  `http://vfchannel.io/`.

   <Image align="left" className="border" border={true} src="https://files.readme.io/623087da1bb40b99a78652953dd2e16ffe647add7bd5e8a0fb6c334f41df0df3-Origin.png" />