# Settings

## Introduction

Pool **Settings** cover the pool's identity and upstream wiring: name, origins,
and custody mode. Open **Pools → Settings** for a pool to edit them.

## Custody modes

### Pass-through

Your client authenticates to the upstream. nthbouncer relays the request (and
headers such as `Authorization`) after admitting a slot. Use
`X-Nthpool-Key` for the pool key. Do not put the pool key in `Authorization`.

### Managed

nthbouncer attaches an encrypted upstream [credential](/docs/credentials) on
each proxied request (for example static bearer, basic, API key, OAuth 1.0,
OAuth2 client-credentials, or OAuth2 refresh token). Callers authenticate only
with a pool key.

## Origins

Each pool pins 1-8 origins. Per request, origin selection is:

1. `X-Nthpool-Origin` if present (must exactly match a configured origin)
2. Otherwise the longest matching `pathPrefix`
3. Otherwise the first origin without a path prefix
4. Otherwise `400`. Send `X-Nthpool-Origin`

Managed pools never call hosts outside the pinned set.

## Next steps

- [Access](/docs/pools/access)
- [Pools](/docs/pools)
- [Credentials](/docs/credentials)