diff --git a/apps/inspector/0.16.3/data.yml b/apps/inspector/0.16.3/data.yml
index dede2e8..f9c6330 100644
--- a/apps/inspector/0.16.3/data.yml
+++ b/apps/inspector/0.16.3/data.yml
@@ -37,7 +37,7 @@ additionalProperties:
               value: "true"
             - label: "False"
               value: ""
-        - default: ""
+        - default: "f056e8659d86a35843e4c7bb5b1782b6ba5c10d194e0ddd7ac507ea074f56ca9"
           envKey: MCP_PROXY_AUTH_TOKEN
           labelEn: Proxy Auth Token (openssl rand -hex 32)
           labelZh: 代理认证令牌 (使用命令openssl rand -hex 32生成)
@@ -48,3 +48,14 @@ additionalProperties:
           random: false
           required: false
           type: text
+        - default: "http://your-server-ip:6274"
+          envKey: ALLOWED_ORIGINS
+          labelEn: Allowed Origins
+          labelZh: 允许的网站来源
+          label:
+            en: Allowed Origins
+            zh: 允许的网站来源
+            zh-Hant: 允許的源站
+          required: false
+          type: text
+
diff --git a/apps/inspector/0.16.3/docker-compose.yml b/apps/inspector/0.16.3/docker-compose.yml
index c1dc138..6f7040c 100644
--- a/apps/inspector/0.16.3/docker-compose.yml
+++ b/apps/inspector/0.16.3/docker-compose.yml
@@ -10,8 +10,9 @@ services:
       - ${PANEL_APP_PORT_PROXY}:6277
     environment:
       - NODE_ENV=production
+      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS}
       - DANGEROUSLY_OMIT_AUTH=${DANGEROUSLY_OMIT_AUTH}
-      - MCP_PROXY_AUTH_TOKEN=${MCP_PROXY_AUTH_TOKEN:-}
+      - MCP_PROXY_AUTH_TOKEN=${MCP_PROXY_AUTH_TOKEN}
       - HOST=0.0.0.0
     labels:
       createdBy: "Apps"
diff --git a/apps/inspector/latest/data.yml b/apps/inspector/latest/data.yml
index dede2e8..dc8e136 100644
--- a/apps/inspector/latest/data.yml
+++ b/apps/inspector/latest/data.yml
@@ -37,7 +37,7 @@ additionalProperties:
               value: "true"
             - label: "False"
               value: ""
-        - default: ""
+        - default: "f056e8659d86a35843e4c7bb5b1782b6ba5c10d194e0ddd7ac507ea074f56ca9"
           envKey: MCP_PROXY_AUTH_TOKEN
           labelEn: Proxy Auth Token (openssl rand -hex 32)
           labelZh: 代理认证令牌 (使用命令openssl rand -hex 32生成)
@@ -48,3 +48,13 @@ additionalProperties:
           random: false
           required: false
           type: text
+        - default: "http://your-server-ip:6274"
+          envKey: ALLOWED_ORIGINS
+          labelEn: Allowed Origins
+          labelZh: 允许的网站来源
+          label:
+            en: Allowed Origins
+            zh: 允许的网站来源
+            zh-Hant: 允許的源站
+          required: false
+          type: text
\ No newline at end of file
diff --git a/apps/inspector/latest/docker-compose.yml b/apps/inspector/latest/docker-compose.yml
index 1bf0246..1be17d7 100644
--- a/apps/inspector/latest/docker-compose.yml
+++ b/apps/inspector/latest/docker-compose.yml
@@ -10,8 +10,9 @@ services:
       - ${PANEL_APP_PORT_PROXY}:6277
     environment:
       - NODE_ENV=production
+      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS}
       - DANGEROUSLY_OMIT_AUTH=${DANGEROUSLY_OMIT_AUTH}
-      - MCP_PROXY_AUTH_TOKEN=${MCP_PROXY_AUTH_TOKEN:-}
+      - MCP_PROXY_AUTH_TOKEN=${MCP_PROXY_AUTH_TOKEN:}
       - HOST=0.0.0.0
     labels:
       createdBy: "Apps"