add proxy permissions and filter API