How do I protect my code before letting a script or agent change it?

1. Take a backup of the bucket first (POST /v1/buckets/{bucket_id}/backups).
2. Give the tool a narrow key: buckets:read + buckets:write, without backups:write, so it can't delete or replace your backup.
3. Watch the events feed: actions are recorded with the key's name.
4. Restore if needed: a restore puts the old tree back as a new version and brings back deleted files.

Learn more#

• Backups
• Restore a backup