DevUIOptions Class

Definition

Options that control the security posture of the DevUI HTTP surface.

public sealed class DevUIOptions
type DevUIOptions = class
Public NotInheritable Class DevUIOptions
Inheritance
DevUIOptions

Remarks

DevUI exposes agent metadata that is sensitive in production contexts: system instructions, tool definitions, model identifiers, and workflow structure. By default, DevUI rejects any request whose remote endpoint is not a loopback address. Hosts that intentionally expose DevUI on a non-loopback interface must opt in via AllowRemoteAccess and should also configure AuthToken or ConfigureEndpoints to attach an authorization policy.

Constructors

Name Description
DevUIOptions()

Fields

Name Description
AuthTokenEnvironmentVariable

Environment variable inspected for a default bearer token when AuthToken is not explicitly set.

Properties

Name Description
AllowRemoteAccess

Gets or sets a value indicating whether DevUI may be served to non-loopback callers. Defaults to false.

AuthToken

Gets or sets a shared bearer token required on every DevUI request. When null or empty, the value of the DEVUI_AUTH_TOKEN environment variable is used instead.

ConfigureEndpoints

Gets or sets a callback invoked with the DevUI endpoint group so the host can attach authorization, rate limiting, or other endpoint conventions (for example group.RequireAuthorization("DevUIPolicy")).

Applies to