Feature Requests

Referrer origin or IP-based rules for accessing API endpoints

It will be useful to have role base access over the API keys. Limit a Key to a given project, or a given network Granular control on each functions a given Key can perform Thank you

We should be able to enforce MFA/2FA for all members of our organization. MFA/2FA is a basic component of security and should be enforceable.

Currently Avalanche nodes may require some ports to be made public. E.g. when supporting a subnet. Consequently, there's a DDoS risk. It would be nice if there was some additional DDoS protection against this.