---
title: "Let your sandboxes sign their requests as Runtime's agents, or stop them."
method: PUT
path: "/v1/networks/signed-requests"
tags: ["networks"]
---

# Let your sandboxes sign their requests as Runtime's agents, or stop them.

`PUT /v1/networks/signed-requests`

## Request

- Base URL: `https://api.withruntime.com`
- URL: `https://api.withruntime.com/v1/networks/signed-requests`
- Auth: HTTP bearer

Needs credit on the account, and free. When on, a sandbox can get Runtime's Web Bot Auth signature (IETF draft, RFC 9421 HTTP message signatures) for its outbound HTTP requests, so sites behind Cloudflare and other bot managers recognise them as Runtime's agents. A program gets the headers from https://withruntime.com/api/signed-requests/sign (documented at /docs/egress). Off by default. Turning it off stops new signatures at once; ones already given expire within 5 minutes.

## Headers

- `Idempotency-Key` string

## Request body

- object
  - `enabled` boolean, required: true: your sandboxes may get Runtime's request signature. false: new signatures stop at once, and ones already given expire within 5 minutes.

## Response `200`

Success

- object
  - `enabled` boolean, required: Whether your sandboxes may get Runtime's request signature now.
  - `allowed` boolean, required: Whether this account may turn it on: it must have credit.
  - `why` string, nullable, required: Why it may not, when allowed is false: no_credit, revoked or suspended.
  - `enabledAt` string, nullable, required: When it was last turned on.
  - `disabledAt` string, nullable, required: When it was last turned off.

## Other responses

- `default`: Error

---

[API](https://skmtc.dev/withruntime/apis/runtime-cloud-api.md) · [All operations](https://skmtc.dev/withruntime/apis/runtime-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/withruntime/apis/runtime-cloud-api/revisions/6f4012286988?raw)