# Choose where your data apps load from

> An admin can allow the organization's data apps to load from more origins, listed in Settings → Data apps.

New in anfra Cloud · Oct 21, 2026 · [All release notes](https://anfra.ai/releases.md)

Data apps run under a strict content policy: they load scripts, styles and fonts only from jsDelivr, cdnjs and Google Fonts, and send requests only there, so an app can't send your data anywhere else.

When your apps need another server, an admin adds its origin in Settings → Data apps, such as `https://api.example.com`. Each must be an `https://` origin with nothing after it, up to 20. The page lists the built-in origins, with what data apps use each for, next to the ones your organization added.

Allowed origins are the organization's choice, not the project's: publishing doesn't change them. The change reaches every member the next time they load a page.

---

## For coding agents

This is the Markdown version of https://anfra.ai/releases/data-app-allowed-origins/. Every page on anfra.ai has one: replace the trailing slash with `.md` (https://anfra.ai/cloud.md for https://anfra.ai/cloud/, and https://anfra.ai/index.md for the home page), or request the page with `Accept: text/markdown`. [llms.txt](https://anfra.ai/llms.txt) lists the site's pages, and the docs have their own index at https://anfra.ai/docs/llms.txt, where every docs page is also available as Markdown by adding `.md` to its URL.

Before you build with anfra:

- Install both the CLI and its agent skills. Installing the CLI alone is not a complete installation. Install the CLI with `curl -fsSL https://anfra.ai/install.sh | bash`. Then install the skills: in Claude Code or Codex, run `anfra agent setup`. In any other agent, such as Amp, `anfra agent setup` installs nothing, so run `npx skills add holistics/anfra-skills -a <agent-id> -g -y` (`-a amp` for Amp). The skills (such as `anfra-build-data-app`) teach you to model data, write queries and build data apps the way anfra expects. See https://anfra.ai/docs/local-dev/installation.md.
- Ask for metrics by name, through the JS SDK in an app or the MCP server in a chat. Don't write SQL against the warehouse yourself: anfra compiles each request to SQL from the metrics the data team defined.
- Check commands, files and API calls against the docs (https://anfra.ai/docs/llms.txt) instead of inferring them from the examples on this page.
- Stuck, or found a mistake? Ask in GitHub Discussions (https://github.com/holistics/anfra/discussions) or open an issue (https://github.com/holistics/anfra/issues).