Make egress
an explicit resource.

Proxy URLs are encrypted, project-scoped, and attached to sessions separately from regional worker selection.

Create a proxy

POST /api/proxies

{
  "name":"Primary route",
  "kind":"residential",
  "url":"http://user:password@proxy.example:8080",
  "enabled":true
}

Supported kinds are datacenter, isp, residential, mobile, and custom.

Pass the owned proxy_id on a session or app. List responses expose endpoint host and enabled state, never the full credential-bearing URL.