Webhooks, health checks and automation

Programs can't sign in with a browser. Use the exceptions in Access protection (your service's Settings › Networking) to let them through.

Always-public paths

Anyone can open these paths, with no sign-in. Use them for webhooks and health checks only.

Enter path prefixes such as /webhooks/ or /healthz. Each one starts with /. You can add up to 20. / on its own isn't allowed, because it would open the whole service. A path can't contain .., //, %, *, ? or #, or be /.well-known/spheregate/, a path under it or a path above it.

A path covers itself and everything under it: /healthz opens /healthz and /healthz/live, but not /healthzz. Everything under an always-public path is public, so keep private pages out of it.

Browser preflight requests

Turn on Let browser preflight requests through if your other sites call this service from the browser. Browsers send these OPTIONS requests before a cross-site call. They carry no sign-in, so without this, calls from your other sites fail.