# API Directory - Allow .php extensions for webhooks
Options -Indexes

# No URL rewriting for API - webhooks need .php
<IfModule mod_rewrite.c>
    RewriteEngine Off
</IfModule>

# Security headers
<IfModule mod_headers.c>
    Header set X-Content-Type-Options "nosniff"
</IfModule>
