Requests from outside 10.x, 192.168.x, 172.16-31.x, 127.x are rejected with 403 before the API key is even checked. This prevents the database dump endpoint from being reachable from the internet even if the key leaked. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>