firecrawl-enterprise-rbac

# Firecrawl Enterprise RBAC ## Overview Control access to Firecrawl scraping resources through API key management, domain allowlists, and credit budgets per team. Firecrawl's credit-based pricing means access control is primarily about limiting credit consumption and restricting scrape targets per consumer. ## Prerequisites - Firecrawl Team or Scale plan - Dashboard access at [firecrawl.dev/app](https://firecrawl.dev/app) - Understanding of credit-per-page billing ## Instructions ### Step 1: Separate API Keys per Consumer ```bash set -euo pipefail # Create dedicated keys at firecrawl.dev/app for each team/service # Content indexing pipeline — high volume # Key: fc-content-indexer-prod (monthly credit limit: 50,000) # Sales team prospect research — scrape only # Key: fc-sales-research (monthly credit limit: 5,000) # Dev/testing — minimal # Key: fc-dev-testing (monthly credit limit: 500) ``` ### Step 2: Gateway Proxy with Domain Allowlists ```typescript import FirecrawlApp from "@mendable/firecrawl-js"; const TEAM_POLICIES: Record<string, { apiKey: string; allowedDomains: string[]; maxPagesPerCrawl: number; dailyCreditLimit: number; }> = { "content-team": { apiKey: process.env.FIRECRAWL_KEY_CONTENT!, allowedDomains: ["docs.*", "*.readthedocs.io", "medium.com"], maxPagesPerCrawl: 200, dailyCreditLimit: 2000, }, "sales-team": { apiKey: process.env.FIRECRAWL_KEY_SALES!, allowedDomains: ["linkedin.com", "crunchbase.com", "g2.com"], ...