How it works
Your mini app is HTML, CSS and JavaScript. It declares in a manifest what it needs; Radex grants nothing more.
{
"id": "rides",
"name": "Taxi",
"permissions": ["location"],
"collections": ["places", "drivers"],
"actions": ["estimate_ride", "request_ride"],
"allowedDomains": ["api.example.ma"]
}