> ## Documentation Index
> Fetch the complete documentation index at: https://help-plum.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure IP Whitelisting

IP Whitelisting is a security feature that restricts access to the Rewards API to approved IP addresses. Once enabled, only API requests originating from whitelisted IP addresses are accepted. Requests from any other IP address are rejected.

This feature helps organizations secure their API integrations and ensure that only trusted servers can communicate with the Rewards API.

## Benefits of IP Whitelisting

IP Whitelisting can help organizations:

* Secure access to the Rewards API.
* Restrict API requests to trusted servers or networks.
* Prevent unauthorized access to API credentials.
* Meet internal security and compliance requirements.

## How It Works

After one or more IP addresses are whitelisted:

* API requests from approved IP addresses are processed normally.
* API requests from any other IP address are rejected.
* Changes to the IP allowlist take effect immediately.

If a request is made from an IP address that is not on the allowlist, the API returns an error indicating that the request originated from a non-whitelisted IP address.

<Note>
  Example: If your organization whitelists the public IP addresses of its office network or application servers, only requests originating from those IP addresses can access the Rewards API. Requests from any other location are blocked.
</Note>

## Add a Whitelisted IP Address

To add an IP address to the allowlist:

<Steps>
  <Step title="Navigate to Settings > API > Rewards API" />

  <Step title="Scroll to the IP Whitelisting section" />

  <Step title="Enter the IPv4 address to be whitelisted" />

  <Step title="Click Add" />
</Steps>

The IP address is added to the allowlist and can immediately be used to access the Rewards API.

## Manage Whitelisted IP Addresses

Organizations can whitelist multiple IP addresses to support different servers or environments.

To remove an IP address:

<Steps>
  <Step title="Navigate to the IP Whitelisting section" />

  <Step title="Locate the IP address in the list" />

  <Step title="Click Delete" />
</Steps>

Once removed, requests originating from that IP address are no longer authorized to access the Rewards API.