You can approve an OAuth app without giving it every Chief Tools product permission it requested. On the authorization screen, clear the optional permissions you do not want to share, then continue with the remaining access. This also works for device authorization when the client supports partial grants.

Enter an IPv4 or IPv6 CIDR range directly in an IP Address rule condition. You can match a single range or include ranges alongside individual addresses in an in-list condition, so a known network does not need its own IP list.

In the rule editor, you can now add conditions for the HTTP method, a named query parameter, or a named cookie. Combine them with existing conditions to target specific requests, such as POST requests with a particular parameter value.

A hosted DNS record that fails to sync now shows a warning on the DNS records page, with the provider's error available when you open the record. Team members with activity notifications enabled can also receive an email listing affected records.

Run flowguard setup <host-key> on a proxy host to fetch its configuration. In an interactive terminal, setup can detect a Plesk certificate directory or NGINX configuration path, ask you to confirm it, save the selected path to the control panel, and download the updated configuration.

When creating or editing a rule, use the Servers field to choose All servers, Only selected servers, or All except selected servers. This lets you roll out a rule to a subset of your proxies or keep it away from particular servers without duplicating the rule.

A shared rule page now shows how many requests the rule allowed, blocked, challenged, rate limited, or logged in the last 24 hours, according to its action. This gives someone reviewing or importing the rule a quick sense of its recent activity.

Open Log Details in Stream to investigate a value without copying it into another tool. Client and proxy IP addresses link to RDAP, WHOIS, and PTR lookups; domains link to DNS, RDAP, and WHOIS; ASNs link to RDAP and WHOIS.

Stream now exposes response resource details, including type, MIME value, file extension, and whether a response looks like a static asset. Add these as columns or filter on them to separate pages, API responses, images, scripts, and other resources while investigating traffic.

In Settings → Trusted Proxies, choose existing team or built-in IP lists whose addresses may supply the real client IP through forwarding headers. You can add or remove lists and restore the defaults.

Eligible active domains now show Delete now on the renewal card. Enter the full domain name to confirm a direct deletion request instead of waiting for expiration. Integrations can request deletion through the Domain Chief API.

The contact editor now collects the extra registrant details needed for .fi domains: a Finnish identity code for a Finnish person, a birth date for a person outside Finland, or company type and registration number for a company. Domain Chief checks these details before using the contact for a .fi domain.

Create a Challenge action and attach it to a rule to require a browser proof-of-work check before a matching request reaches your application. Visitors who pass receive a clearance cookie for that rule, while non-HTML clients receive a machine-readable response with a challenge URL.

Pricing and domain search results now mark TLDs whose incoming transfer charge is zero with a free transfer badge. Use it to distinguish a free transfer from the domain's registration or renewal price, then check the transfer review for the exact amount and renewal effect.

A failed incoming transfer now offers Cancel transfer when you do not want to retry. This removes the failed transfer placeholder from Domain Chief; it does not delete the domain at its current registrar or refund the transfer charge.

Hosted DNS imports now accept XLSX and ODS spreadsheets in addition to zone files and CSV. Choose Import on a domain's DNS records page and upload a file with record name, type, and value columns.

Contacts for .nu and .se domains can now include the personal identifier or company registration number required for the owner. The contact editor and Contacts API validate these details before the contact is used for a domain.

The Dashboard now calls out failed domain operations and shows how many need attention. Use its review button to open the affected domains and check each failure before retrying or taking another available action.

Teams that pay per operation can now collect pending registrations and incoming transfers into one checkout. Open Settings → Pending payments to review the domains and amounts, pay the batch, or cancel an operation before checkout starts.

The hosted DNS editor now separates the fields for SRV, CAA, and TLSA records, such as an SRV target and port or a CAA tag and value. It also labels MX content as Mail server. Open a domain's DNS records to create or edit these records without assembling every value into one text field.