Controls which websites are allowed to access which APIs