Restrict an integration by IP address
Accept requests for an integration only from your server's addresses.
An IP allowlist is optional. It reduces what a leaked credential can do, but it doesn't replace your credentials, scopes or account checks. Read CORS and IP restrictions to see what it protects against.
- Find the public addresses your server sends requests from. If your server sits behind a NAT gateway, use the gateway's addresses.
- On the Integrations tab, find the integration and click IP ranges.
- Add each IPv4 or IPv6 address or CIDR range, such as
203.0.113.0/24or2001:db8::/32. - Click Save.
If the list doesn't include the address the integration last used, or the integration has never been used, MyTPE warns you that the change could lock your server out. Check the list, then click Save anyway if it's correct.
To remove the restriction, remove every range and save.
For the rules on ranges, see IP allowlist.
Postman collection