---
title: "getSecureProxyWhitelist"
method: GET
path: "/v2/integrations/{integrationId}/use-cases/{useCaseId}/secure-proxy-whitelist"
tags: ["integrations", "proxy"]
---

# getSecureProxyWhitelist

`GET /v2/integrations/{integrationId}/use-cases/{useCaseId}/secure-proxy-whitelist`

Returns the current allowed_domains, allowed_ips, and vpc_mode for a secure_proxy use case.
Staff-only — gated by internal-auth issuer AND admin-portal Cognito user pool membership.
Rejects Login-As tokens.

## Path parameters

- `integrationId` string, uuid, required
- `useCaseId` string, uuid, required

## Response `200`

Current whitelist

- SecureProxyWhitelist — Current whitelist state for a secure_proxy use case. vpc_mode is read-only context so the UI can show the user what mode the pool is in.
  - `vpc_mode` 'static_ip' | 'secure_link', nullable, required — VPC routing mode (read-only). `null` if not yet set.
  - `allowed_domains` string[], required — Exact domain ("api.example.com") or wildcard prefix ("*.example.com"). Wildcards must have at least 2 labels in the suffix.
  - `allowed_ips` string[], required — CIDR-notation IP ranges, e.g. "10.0.0.0/24".

## Other responses

- `400` — Bad request
- `401` — Unauthorized request
- `403` — Forbidden - insufficient permissions
- `404` — Use case not found or not of type secure_proxy

---

[API](https://skmtc.dev/epilot/apis/integration-toolkit-api.md) · [All operations](https://skmtc.dev/epilot/apis/integration-toolkit-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/epilot/integration-toolkit-api/revisions/a765dc127359/schema)