# AddInSettings

Location: [gRPC API](https://developer.m-files.com/APIs/gRPC-API/index.md) > [Reference](https://developer.m-files.com/APIs/gRPC-API/Reference/index.md) > [Messages](https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/index.md)

HTML version: https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/MFiles.AddInSettings/

Struct for AddIn Settings information.

- **Full name:** `MFiles.AddInSettings`
- **Proto file:** [`mfiles/structs.proto`](https://developer.m-files.com/APIs/gRPC-API/downloads/proto/mfiles/structs.proto)

<a id="fields"></a>

## Fields

| Field | Type | Number | Description |
|---|---|---|---|
| <a id="f-allowed_methods"></a>`allowed_methods` | repeated `string` | 1 | The list of allowed HTTP Methods. |
| <a id="f-allowed_cross_frame_sites"></a>`allowed_cross_frame_sites` | repeated `string` | 2 | The list of allowed Cross Frame Sites. |
| <a id="f-allowed_headers"></a>`allowed_headers` | repeated `string` | 3 | The list of allowed HTTP Response Headers. |
| <a id="f-cross_origin_access"></a>`cross_origin_access` | repeated `string` | 4 | The list of Cross Origin Access Domains. |
| <a id="f-allow_credentials"></a>`allow_credentials` | `bool` | 5 | True to allow the credentials, false to skip credentials. |
| <a id="f-prevent_xfs"></a>`prevent_xfs` | `bool` | 6 | True to Prevent XFS, false to allow XFS. |

<a id="used-in-fields"></a>

## Used in fields

- [`AddInSettingsOfVault.settings`](https://developer.m-files.com/APIs/gRPC-API/Reference/Messages/MFiles.AddInSettingsOfVault/index.md#f-settings): The settings.