Skip to main content

​
Overview

IP allowlisting lets you restrict API access to a set of trusted IP addresses or CIDR ranges. When enabled, requests from unlisted IPs are rejected with 403 Forbidden.

​
How It Works

  1. Add IP addresses or CIDR ranges to your workspace allowlist from Settings > Security in the dashboard.
  2. Once the allowlist is non-empty, only requests from listed IPs are permitted.
  3. Requests from unlisted IPs receive a 403 response.
Be careful when enabling IP allowlisting. If you add an incorrect range and lock yourself out, you will need to contact support to reset the allowlist. Always include your current IP address before enabling.

​
CIDR Notation

IP allowlisting supports both individual addresses and CIDR ranges:

​
Scope

The allowlist applies to all API keys in the workspace. There is no per-key allowlisting — if you need different access restrictions, use separate workspaces.
Leave the allowlist empty to permit requests from any IP address. IP allowlisting is optional.

​
Plan Quotas