IP Whitelist

Restrict API access to trusted network addresses with IP whitelisting.

When IP whitelist is enabled, Finpay only accepts API requests from registered IP addresses that use your credentials. This reduces the risk of unauthorized API access.

Use IP whitelist for production credentials. Review the list whenever your infrastructure changes.

Before you enable IP whitelist

Make sure you have:

• A user account with permission to manage API credentials and IP whitelist

• The public IP addresses used by your server or gateway

• A rollback plan in case your network address changes

If you whitelist the wrong IP address, your API requests can fail until the list is corrected.

Add an IP address to the whitelist

1

Sign in

Sign in to the Finpay Dashboard.

2

Open IP whitelist settings

Go to Settings → IP Whitelist.

3

Add the address

Click + Add.

Enter the public IP address you want to allow.

4

Save the change

Click Submit to save the new whitelist entry.

5

Verify API access

Send a test API request from the registered IP address.

Confirm the request is accepted.

After the IP is registered, only listed IP addresses can send API requests with your Finpay credentials.

When to update the whitelist

Update the whitelist when:

• You move your application to a new server or cloud environment

• Your internet provider changes your public IP address

• You add a new production or failover endpoint

Remove IP addresses that are no longer in use.

Recommended security practices

• Whitelist only fixed and trusted public IP addresses.

• Keep production and non-production environments separate.

• Review the whitelist after infrastructure changes.

• Combine IP whitelist with 2FA Authentication for stronger account security.

• Control admin access with User & Roles.

Troubleshooting

If API requests fail after enabling IP whitelist:

• Confirm the request comes from a registered public IP address

• Check whether your server IP has changed

• Review the whitelist entry for typing errors

• Retry the request after saving the latest change

If the issue continues, review your current network path and update the whitelist with the correct public IP address.