Can't Execute SQL Procedures via Localhost – Workarounds for On-Prem/Internal Hosting?

Hi team!

I’m trying to execute an SQL stored procedure through Directus (v11.7.2) served locally (localhost or 0.0.0.0), but it fails with a “denied” error unless hosted on a public domain. My company requires on-prem/internal hosting, so a “real” domain isn’t an option.

Current Workflow Attempt:

  1. Flow triggers a webhook → sends POST to a custom endpoint extension.
  2. Endpoint calls the SQL procedure (e.g., CALL my_procedure()).
  3. Fails with:

text

  1. [INTERNAL_SERVER_ERROR] Requested domain “0.0.0.0” resolves to a denied IP address

Questions:

  1. Is this a security restriction in Directus, or is there a config to bypass localhost limits for internal use?
  2. Are there alternative approaches? For example:
  • Using the directus_database SDK in the endpoint instead of raw SQL.
  • Proxy tricks (e.g., NGINX with fake domain pointing to 0.0.0.0).s.

Note: I’ve verified the SQL procedure works directly in my database client—just not through Directus’ API.

Thanks for any hacks or official workarounds!

localhost and related IPs are blocked by default as a security measure. You’ll want to set the IMPORT_IP_DENY_LIST= environment variable to empty to remove these default values