Developer Documentation

IP Allowlisting

Restrict a FundraiserMax API key to specific IP addresses or CIDR ranges. Requests from any other address are rejected.

IP Allowlisting

For additional security, you can restrict each API key to only accept requests from specific IP addresses or CIDR ranges. When IP allowlisting is enabled for a key, requests from non-allowlisted IPs will receive a 403 Forbidden response.

Configuring Allowlists

IP allowlists are configured per API key in your FundraiserMax dashboard under Settings > API Keys. Click on a key and add one or more IP addresses or CIDR blocks.

Supported Formats

  • Single IPv4 address: 203.0.113.50
  • IPv4 CIDR range: 203.0.113.0/24
  • Single IPv6 address: 2001:db8::1
  • IPv6 CIDR range: 2001:db8::/32
Important: If you leave the allowlist empty, the API key will accept requests from any IP address. Adding even one entry will restrict access to only the listed addresses.
{
  "allowedIps": [
    "203.0.113.50",
    "198.51.100.0/24",
    "2001:db8::1"
  ]
}