​

IP Whitelisting

​

How It Works

1. Every incoming API request (whether using a Secret Key sk_... or a short-lived Bearer token) is checked against your configured IP whitelist before processing.
2. If your server’s public IP address does not match an authorized entry, the connection is immediately terminated with an HTTP 403 Forbidden response:
   {
     "status": "error",
     "statusCode": 403,
     "message": "IP address not allowed for this merchant account",
     "error": "Forbidden",
     "timestamp": "2026-10-12T07:20:00.000Z",
     "path": "/api/v1/merchant/cards"
   }
   
3. If no whitelist has been configured for the environment, all requests are denied by default.

​

1. Add IP to Merchant Dashboard

1. Sign in to your LaikiPayMerchant Dashboard.
2. Navigate to Settings → Security & IP Whitelisting.
3. Select either the Test Whitelist tab (for development) or Live Whitelist tab (for production).
4. Enter your IP addresses:
   198.51.100.42, 198.51.100.43, 203.0.113.0/28
   
5. Click Save Changes. Changes take effect immediately.