How to set an API secret ?

[priamai]

Hi there,
I am hosting the client on Vast.AI and I would like to protect the API via a simple key.
How can I do that?
Cheers.

[henk717]

The API doesn't support a key but the --remote link is already randomized and long.

[priamai]

The problem is that even with that when it is hosted on a VM with a static IP, eventually a user can figure it out via scanning and the abuse my service.
I am just thinking of another way maybe have it listen only to localhost and then I can use ngrok + authentication token ?

[henk717]

On the United version we don't allow direct IP access by default when only --remote is used, so they can't IP scan it.