set_app_firewall

com.fadehost/mcp · Verify this server

Write the outbound list of a PAID hosted app or bot: either policy open, which allows everything out, or policy allowlist with the rules of what it may reach. The whole list is replaced by what is passed, so read get_app_firewall first and send the rules that should remain. A rule is a protocol (tcp or udp), one port like 443 or a range like 50000-65535, and optionally one IPv4 destination range to narrow it to. Refuses a free app: its list is the plan fixed list and cannot be changed. Refuses a destination in a private or internal range, because an app cannot reach those with or without a rule. Refuses a port that is closed for every app, named or inside a range. Refuses an allowlist with no rules; use policy open for that. Refuses while the app is paused. Needs full access to the app. A running app is restarted to pick the list up; a stopped one picks it up on its next start.