For the complete documentation index, see /llms.txt. This page is also available as raw Markdown at /cloud/nexus/security.md. Append .md to any page URL to fetch its Markdown.

Security - Temporal Nexus

View Markdown

Nexus security in Temporal Cloud:

• Runtime access controls - Endpoint allowlists restrict which caller Namespaces can use an Endpoint. See configuring access controls.
• Secure connectivity - mTLS for all Nexus communication across cells and regions. Endpoints are only accessible within a Temporal Cloud Account.
• Payload encryption - Same Data Converter as Workflows and Activities, with three approaches for cross-Namespace encryption.
• Registry roles and permissions - Controls who can view, create, edit, and delete Endpoints.