Custom lists with string values

Hi,

Today: reusable lists support IP/CIDR only. Everything else — User-Agent strings, URL paths, header values, Referer domains, JA4 fingerprints, account IDs — has to be enumerated inline in rule conditions.

Problem: the same values are duplicated across rules; adding one bad User-Agent means editing and republishing detection logic; rules grow into unreadable regex; and we can't populate values automatically from our threat intel or anti-fraud systems.

Request:

• Typed lists: string, wildcard, regex, ASN, JA4, etc
• Referenceable from any condition of any rule
• CRUD via API, independent of rules; optional per-entry TTL
• Separate permission to edit list contents without editing rules
• Audit trail of entry changes

Benefit: separation of duties between on-call and rule author; automated list population from our own systems.

Thank you for taking the time to write such a detailed request — it's clear you know the product well, and feedback like this is genuinely valuable to us 🙏 We fully agree with what you're describing and have discussed it internally at length. That said, we're sorry to say we don't currently have plans to bring this to the Community Edition.

Here's something we can share ahead of time: MCP support is on the way and will be released soon. Once it's available, you'll be able to use AI tools to add or remove entries like blocked IPs directly — no more configuring them one by one, which should make day-to-day management much easier.

Thanks again for the thoughtful feedback! If you'd like to share more about your setup and use case, we'd love to hear it — it really helps shape our future plans.

Do you have plans to add this to Pro edition?