Skip to main content
An IP address allowlist restricts your organization’s access to the (ADE) APIs to a set of approved IP addresses. When an allowlist is active, API requests from any other address are rejected. Use an allowlist to ensure your organization’s API keys work only from networks you control, such as your corporate network or your production servers. The IP address allowlist is available on the Enterprise plan.

​
Set Up an Allowlist

To enable an IP allowlist for your organization, email your request with the approved IP addresses to support@landing.ai. To later change the IP addresses on the allowlist or disable allowlisting, email support@landing.ai.

​
Which IP Addresses Should Be on the Allowlist?

Include the public addresses your API traffic leaves your network from. If your requests go through a NAT gateway, VPN, or proxy, that device’s public address is the one ADE sees, not the local address of the machine sending the request. An allowlist can contain:
  • Single IPv4 or IPv6 addresses (for example, 203.0.113.7)
  • CIDR ranges (for example, 203.0.113.0/24 or 2001:db8::/32)

​
What the Allowlist Covers

The allowlist applies to every request to the ADE APIs, both v1 and v2, no matter which of your organization’s API keys the request uses. The allowlist does not restrict the Playground. When you use the Playground, its API requests are sent by LandingAI’s servers on your behalf, so those requests never come from your organization’s network. Members of your organization can sign in and use the Playground from any network.

​
Blocked Requests

An API request from an address that is not on your organization’s allowlist is rejected with an HTTP 403 response. The response body carries the error code forbidden and this message: