This endpoint lets a Phaethon daemon on a filtered network reach origins that
the network breaks — currently *.vercel.com, whose TLS is
intercepted on the affected path. The Cloudflare edge performs the fetch and
returns the response.
It is not an open proxy and not a TCP tunnel. Every request must carry a shared secret, and only hosts in this deployment's allowlist can be fetched. The allowlist is enforced here, server-side.
| Endpoint | Purpose |
|---|---|
/health | liveness, colo, and this relay's allowlist |
/relay/<host>/<path> | fetch an allowlisted origin (requires X-Phaethon-Token) |