Fixed Outbound Address

Our Commitment MountDev Ops is built security first. Your business data belongs to you, and you can export all of it at any time. We never use analytics or tracking of any kind inside MountDev Ops.

Some services accept calls only from addresses registered with them. A cloud service's address changes, so those services cannot be connected the usual way. A fixed address solves that: the calls for those connections leave from a server whose address never changes, and you register that one address with the service once.

What Uses It

• A connection whose service needs a fixed address (the service says so when it is added to MountDev Ops). Its calls go through the fixed address server automatically. You do nothing.
• Any Connected Service whose service asks for an allowlist (not Stripe, MCP servers, or Zoho Desk, which go out their own way). In Settings, Connections, Connected Services, turn on Send From a Fixed Address on the connection (action core.connections.fixed_address.set, owners and admins). It shows the address with a Copy button, and asks you to add it to the service's allowed list as a single address. The address is shared: every company that turns it on sends from the same one. Turn it off and the connection goes out directly again. Every workflow step, published action, and AI action that uses the connection follows the switch.
• The switch is shown only once the fixed address server is set up for your data region (the United States for now).
• Nothing else. Payments, email, phone, and every other connection go out directly, as they always did.

The server passes calls only to the address saved on your own connection (https, the standard port, never a private address). Which services the server will reach is decided by the platform owner; a call to one it does not reach fails with "refused this call (403)" and is not sent any other way.

How It Stays Private

• The server passes the encrypted connection along and nothing else. It cannot read what passes through, and it stores nothing: not the request, not the answer, not your key.
• Your key goes with each call, from your workspace to the service, inside that encrypted connection. The server never holds it.
• The server accepts only calls signed by MountDev Ops, only to the services on its list, and only once per call. Its log holds counts and error codes, never what was sent.
• The server's address and its signing key are kept as a Platform Connection in the platform owner's own account (Platform Connections in the documentation), sealed like any connection and lent to a call one request at a time. Holding it gives no view into any account.
• The server is in the United States. A workspace in another data region has no fixed address until one is added for that region.

When the Server Is Down

If the server cannot be reached, the call fails with a clear message, waits, and is tried again. A call is never sent directly in place of a fixed address. A call that already reached the service is never sent a second time, so work is never done twice. (A second server can be added later; calls then go to it when the first cannot be reached.)

Checking It

• Check Servers, on a connection that is sending from a fixed address, (action core.connections.fixed_address.health, owners and admins) says whether the server in your region answers, how long it took, and which of your connections use a fixed address. It sends nothing to any service.
• Check Now on a connection that uses a fixed address asks the service through the server, like any call.
• The Integrations app (R1.8) will show the same card (Planned).

The Address to Register Planned

The one address for the United States is published here once the server is running, and on the connect screen of each connection that needs it. Register it as a single address (not a range). A change of address is announced here and to the workspaces that use it before it happens. The European Union is added with that region.

What Is Not Included

Sending all outbound traffic through the server, and a fixed address for incoming traffic.