> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bridge.linkio.world/llms.txt
> Use this file to discover all available pages before exploring further.

# Allowlist your IP addresses

> Only requests from the addresses you list can use your API keys.

The IP allowlist is a list of the internet addresses your servers call Bridge from. If someone steals your API key, they still can't use it from anywhere else.

> [!WARNING]
>
> **The list starts empty, and an empty list blocks every request.** You must add at least one address before your API key will work.

## Add an address

**1. Open the integration settings**

Go to **Settings → Integration → IP whitelisting**.

**2. Add the address**

Choose **Add IP address**. Enter the address and a label so you remember what it is, for example `app-production`.

**3. Save**

The change takes effect straight away.

## What you can add

| Type | Example |
| - | - |
| A single IPv4 address | `203.0.113.10` |
| A single IPv6 address | `2001:db8::10` |
| A range of addresses (CIDR) | `203.0.113.0/24` |

* You can add up to **5** entries.
* Labels can be up to 64 characters.
* `203.0.113.10` and `203.0.113.10/32` are the same entry, so you can't add both.

> [!TIP]
>
> If your servers' addresses change often, ask your hosting provider for a fixed outgoing address (sometimes called a static IP or NAT gateway).

## When a request is blocked

A blocked request gets a `403` error. The message tells you which address the request came from, so you know exactly what to add.

> [tab] No addresses added yet
>
> ```json theme={null}
> {
>   "error": {
>     "type": "authorization_error",
>     "code": "forbidden",
>     "message": "No IP addresses are allowlisted for this business. This request came from 198.51.100.7. Add the addresses that call the API in the dashboard.",
>     "request_id": "req_3VnR7tY1wZ4cB6dE8fK2mQ9xLp",
>     "status": 403
>   }
> }
> ```

> [tab] Address not on the list
>
> ```json theme={null}
> {
>   "error": {
>     "type": "authorization_error",
>     "code": "forbidden",
>     "message": "This IP address is not allowed to call the API. This request came from 198.51.100.7. Add it to the allowlist in the dashboard if it should have access.",
>     "request_id": "req_3VnR7tY1wZ4cB6dE8fK2mQ9xLp",
>     "status": 403
>   }
> }
> ```
>
> Add that address, or check that your server is calling from the address you expected.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.