> ## Documentation Index
> Fetch the complete documentation index at: https://docs.laikipay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Whitelisting

> Restricting API access strictly to your authorized server IP addresses

# IP Whitelisting

To guarantee that your API keys cannot be abused even if accidentally exposed, LaikiPay enforces **IP Whitelisting** across both Sandbox and Production environments.

***

## How It Works

1. Every incoming API request (whether using a Secret Key `sk_...` or a short-lived Bearer token) is checked against your configured IP whitelist before processing.
2. If your server's public IP address does not match an authorized entry, the connection is immediately terminated with an **`HTTP 403 Forbidden`** response:
   ```json theme={null}
   {
     "status": "error",
     "statusCode": 403,
     "message": "IP address not allowed for this merchant account",
     "error": "Forbidden",
     "timestamp": "2026-10-12T07:20:00.000Z",
     "path": "/api/v1/merchant/cards"
   }
   ```
3. If no whitelist has been configured for the environment, all requests are denied by default.

***

### 1. Add IP to Merchant Dashboard

1. Sign in to your [LaikiPayMerchant Dashboard](https://merchant.laikipay.com).
2. Navigate to **Settings → Security & IP Whitelisting**.
3. Select either the **Test Whitelist** tab (for development) or **Live Whitelist** tab (for production).
4. Enter your IP addresses:
   ```text theme={null}
   198.51.100.42, 198.51.100.43, 203.0.113.0/28
   ```
5. Click **Save Changes**. Changes take effect immediately.

***


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.