# Domain allowlist for API steps

> <p>Enterprise admins can now restrict which external domains Flows are allowed to pull data from or push data to via the API&nbsp;steps.</p>

Source: https://parabola.io/updates/domain-allowlist-for-flow-runs