Security
IP allowlist
An IP allowlist makes a key work only from addresses you list. Even if the key leaks, nobody else can use it.
Set it up
- Find your server's public IP (for example
curl https://api.ipify.orgon the server). - In the dashboard, open the key and choose IP allowlist.
- Enter one IP or range per line. Up to 20 entries.
| Entry | Example |
|---|---|
| Single IPv4 | 203.0.113.10 |
| IPv4 range | 203.0.113.0/24 (at most /16) |
| Single IPv6 | 2001:db8::10 |
| IPv6 range | 2001:db8::/64 (at most /48) |
Leave the list empty to allow any IP. Requests from other IPs fail with ip_not_allowed (HTTP 403), and the message tells you the IP we saw.
New IP alerts
Whether or not you use an allowlist, the first time a key is used from a new IP we send you a Telegram and email alert with a link to revoke the key.