IP Access Control

Restrict app access to trusted networks with reusable IP policies

IP access control restricts app access based on the public IP address of each incoming request. With IP access control, you can limit access to your apps to trusted networks, such as your office network or specific servers.

You define the allowed addresses in an IP policy and choose which access points it protects in each app’s Access Control.

IP access control is available on the Professional and Team plans.

Only workspace owners and admins can create, edit, or delete IP policies. Editors with permission to manage an app’s access points can configure its Access Control using existing policies.

Manage IP Policies

You can manage IP policies under Settings > IP Policies in your workspace. The same policy can be applied to multiple apps in that workspace.

Create an IP Policy

Click Create an IP policy, or Add if your workspace already has policies. Enter a Name and add the addresses you want to allow to the Allowlist:

• To allow the network you’re currently using, click Add it next to your current IP address.
• Ask your network or system administrator for the public IP addresses of the networks or servers that need access to your app.

You can enter individual IPv4 or IPv6 addresses, or a range in CIDR notation. Adding a range allows requests from every IP address in that range.

Click Create. You can then apply the policy to an app in its Access Control settings.

Edit an IP Policy

In IP Policies, select a policy, update its Allowlist, and click Save.

Changes affect all apps using the policy and take effect without republishing.

Delete an IP Policy

Deletion is permanent and removes IP protection from all apps using the policy.

In IP Policies, open the policy’s … menu, select Delete, and confirm.

Configure App Access Control

Open your app from Studio, or your Agent from Agents, then go to its Access Point tab. You’ll find Access Control in the top-right corner.

Set Up Access Control

1. Under IP Policy, select the policy you want to use.
2. Under Apply to, turn on the access points you want this IP policy to protect, then click Save. Unselected access points remain unrestricted by this policy.

To check your setup, test a selected access point from an allowed network and one outside the allowed range.

Change the Policy or Protected Access Points

In Access Control, click Edit, update your selections under IP Policy or Apply to, and click Save.

Saving also re-enables paused Access Control.

Pause or Resume Access Control

In Access Control, turn off Restrict by IP address and confirm. Turn the switch back on to resume.

While paused, IP restrictions stop applying, but your settings are kept.

IP protection also stops if your Professional or Team subscription becomes inactive. Your settings are kept. Renew or upgrade to either plan to use IP protection again.