Link is built for secure provider connectivity. It supports message-level JWE encryption of request and response bodies with rotatable keys, and it can rotate backend credentials and encryption keys without downtime. Outbound calls pass an SSRF guard – HTTPS-only, no private or internal addresses – validated when you register or update a backend or imported protocol URL.

These controls let you meet strict provider and security requirements without building the plumbing yourself.

→ See credential and key rotation