Set Organization IP Allowlist
Replaces the IP allowlist and, when the scopes field is present, the enforcement scopes for the caller’s organization (resolved from the JWT). Both land in a single atomic write. Entries is mandatory: it is the full replacement list, and an explicit empty array is the only way to deactivate the allowlist. A body that omits entries (including ) is rejected with 400 IDE-0001 instead of being read as a request to clear every CIDR. Scopes selects the enforced surfaces (“console”, “api”, both or neither): omitting the field leaves the stored scopes untouched, while an explicit empty array stops enforcing every surface. Admin-only.
Authorizations
Bearer authentication. Send Authorization: Bearer .
Body
IP Allowlist Input
IPAllowlistInput payload
Entries is the desired allowlist expressed as IP addresses or CIDR blocks. Bare addresses are widened to host routes (/32 or /128) and CIDRs are canonicalized on persist. The key is required and an explicit empty list deactivates the allowlist; an omitted key is a 400, never a wipe.