> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Organization IP Allowlist

> Retrieves the current IP allowlist and enforcement scopes for the caller's organization (resolved from the JWT). Admin-only. An empty entries list means the allowlist feature is off; an empty scopes list means no surface is enforced.



## OpenAPI

````yaml /en/openapi/v3-current/AM-identity.yaml get /v1/security/ip-allowlist
openapi: 3.0.1
info:
  contact: {}
  description: This is a swagger documentation for the Identity API
  termsOfService: http://swagger.io/terms/
  title: Identity API
  version: 1.0.0
servers:
  - url: //localhost:4001/
security: []
paths:
  /v1/security/ip-allowlist:
    get:
      tags:
        - Security
      summary: Get Organization IP Allowlist
      description: >-
        Retrieves the current IP allowlist and enforcement scopes for the
        caller's organization (resolved from the JWT). Admin-only. An empty
        entries list means the allowlist feature is off; an empty scopes list
        means no surface is enforced.
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IPAllowlistResponse'
          description: OK
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: >-
            Two different failures share this status - inspect the code field.
            Permission denied: the caller lacks the security:get permission, so
            an administrator must grant it. AUT-0021 (IP Not Allowed): the
            caller IP is outside this organization's allowlist and the
            authorization hook forwarded the deny verbatim - the caller must
            reach the API from an allowed IP. Do not surface an IP deny as a
            permissions problem: it is the lockout case where the admin has to
            fix the allowlist.
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/pkg.HTTPError'
          description: Internal Server Error
      security:
        - BearerAuth: []
components:
  schemas:
    IPAllowlistResponse:
      description: IPAllowlistResponse payload
      example:
        entries:
          - 203.0.113.0/24
          - 198.51.100.7
        scopes:
          - console
          - api
      properties:
        entries:
          example:
            - 203.0.113.0/24
            - 198.51.100.7
          items:
            type: string
          type: array
        scopes:
          example:
            - console
            - api
          items:
            type: string
          type: array
      type: object
    pkg.HTTPError:
      properties:
        code:
          type: string
        entityType:
          type: string
        err:
          type: object
        message:
          type: string
        title:
          type: string
      type: object
  securitySchemes:
    BearerAuth:
      description: 'Bearer authentication. Send Authorization: Bearer <token>.'
      in: header
      name: Authorization
      type: apiKey

````