> ## Documentation Index
> Fetch the complete documentation index at: https://developer.tazapay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Allowlisting

Tazapay now supports IP allowlisting, so you can control which IP addresses can use your API secret key. Requests from non-allowlisted IPs are blocked, even when the key is valid, reducing risk if your secret key is ever leaked.

## What's New

### 1) Manage your IP allowlist from the dashboard

Add or remove IP addresses and CIDR ranges directly from the **API Keys & Developer Docs** page under **Manage IP Allowlist**. Changes take effect immediately after saving.

### 2) Configure allowlists for each secret key

Allowlists are configured per secret key, so your test and live keys each have their own allowlist.

### 3) Support for IPv4, IPv6 and CIDR ranges

Add up to **5 entries per secret key**. Each entry can be an individual IPv4 or IPv6 address, or a CIDR range. Only public IP addresses can be allowlisted.

## Action Required

**No action required.** The allowlist is empty by default, so your existing integrations continue to work without any changes.

If you want to restrict access to your API secret key, add your trusted IP addresses or CIDR ranges to the IP allowlist.

## Questions

See the [IP Allowlisting](/api-reference/appendix/ip-allowlisting) guide for setup instructions and more details, or reach out to [support@tazapay.com](mailto:support@tazapay.com) or your account manager.

## Relevant Links

* [Authentication](/api-reference/api-overview/authentication)
* [IP Allowlisting](/api-reference/appendix/ip-allowlisting)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.