> ## Documentation Index
> Fetch the complete documentation index at: https://docs.landing.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Address Allowlist

> Restrict your organization's API access to approved IP addresses and CIDR ranges. Available on the Enterprise plan.

export const companyName = 'LandingAI';

export const ade = 'Agentic Document Extraction';

An IP address allowlist restricts your organization's access to the {ade} (ADE) APIs to a set of approved IP addresses. When an allowlist is active, API requests from any other address are rejected. Use an allowlist to ensure your organization's API keys work only from networks you control, such as your corporate network or your production servers.

The IP address allowlist is available on the Enterprise plan.

## Set Up an Allowlist

To enable an IP allowlist for your organization, email your request with the approved IP addresses to [support@landing.ai](mailto:support@landing.ai).

To later change the IP addresses on the allowlist or disable allowlisting, email [support@landing.ai](mailto:support@landing.ai).

## Which IP Addresses Should Be on the Allowlist?

Include the public addresses your API traffic leaves your network from. If your requests go through a NAT gateway, VPN, or proxy, that device's public address is the one ADE sees, not the local address of the machine sending the request.

An allowlist can contain:

* Single IPv4 or IPv6 addresses (for example, `203.0.113.7`)
* CIDR ranges (for example, `203.0.113.0/24` or `2001:db8::/32`)

## What the Allowlist Covers

The allowlist applies to every request to the ADE APIs, both v1 and v2, no matter which of your organization's API keys the request uses.

The allowlist does not restrict the [Playground](https://ade.landing.ai/). When you use the Playground, its API requests are sent by LandingAI's servers on your behalf, so those requests never come from your organization's network. Members of your organization can sign in and use the Playground from any network.

## Blocked Requests

An API request from an address that is not on your organization's allowlist is rejected with an HTTP 403 response. The response body carries the error code `forbidden` and this message:

```text theme={null}
Your organization restricts API access to approved IP addresses. This request originated from an address that is not approved.
```