skip to content
Back to homeSign up

IP allowlist

Let only your own systems’ internet addresses call the API, whatever key they use.

Version 1.4 · Last updated ·

What it is

Every system on the internet calls from an address, its IP. With the allowlist on, only the addresses on it may call the API, whatever key they use. A key copied by somebody else is then no use to them.

It is off until you switch it on. While it is off, any address with a key may call.

Add addresses

  1. On IP allowlist, press Add allowlist IP.

  2. Type one address or range a line in Addresses.

    An address, such as 203.0.113.7, or a range, such as 203.0.113.0/24. Ask whoever runs your system for them.

  3. Keep Remove duplicates ticked to leave out an address typed twice or already on the list. Press Add.

The list shows each IP and its Date created. Remove takes one off: calls from it are refused from then on.

Switch it on

Switch on Enable the IP allowlist once your addresses are on the list. Only they may call the API from then on.

  • The allowlist cannot be switched on while it is empty: with no address, nothing could call the API.
  • Its last address cannot be removed while it is on. Switch it off first.
  • A list holds 50 addresses at most.

Still stuck?

A person on our team answers. In the app, open the help button in the corner of any screen. From here, write to us.