Skip to main content
IP allowlisting restricts access to your workspace to the IP ranges you define. Requests from any other address are rejected, whether they come from the web app, the desktop app, or the mobile app. IP allowlisting is available on the Enterprise plan and is configured by workspace admins under Settings → Security.

​
How it works

Once at least one range is saved, Jamie checks the client IP address of every request against the list.
  • Sign-in. Members of your workspace can only sign in from an allowed address. This applies to every sign-in method: email code, Google, Microsoft, Apple, and SSO. A blocked attempt shows Login blocked: your IP address is not allowed.
  • Signed-in sessions. Every request from the web, desktop, and mobile apps is checked, including meeting recording and Ask AI. Requests from outside the allowlist are rejected with Access denied: your IP address is not allowed.
  • Moving networks. A member who leaves an allowed network loses access on their next request and regains it as soon as they are back on one. There is nothing to revoke or re-issue.
The allowlist applies to signed-in users. Requests authenticated with an API key and MCP connections are not restricted by the allowlist.

​
Set up the allowlist

1

Open the IP Allowlist settings

Go to Settings → Security and scroll to IP Allowlist.
2

Enter your ranges

Enter one range per line, or separate them with commas. Both IPv4 and IPv6 are supported, in CIDR notation. A single address without a prefix is treated as exactly that address.
3

Test before saving

Click Test. Jamie compares the ranges against every IP address that accessed your workspace in the last 7 days and lists any that would be blocked. Fix the list until the check reports that all recent addresses are covered.
4

Save

Click Save. The allowlist takes effect immediately for every member of the workspace.
Make sure your own current IP address is included before you save. An allowlist that excludes you locks everyone out, including you, and you will not be able to sign in to fix it. If that happens, contact your account manager or support@meetjamie.ai.
VPNs and Zero Trust clients such as Cloudflare WARP often route traffic over IPv6. If your team uses them, include both the IPv4 and the IPv6 ranges they exit from.

​
Turn off the allowlist

Clear the field and click Save. An empty allowlist allows all IP addresses.

​
Audit log

Changes to the allowlist and the sign-ins it blocks are recorded in the audit log:

​
Questions?

If you have questions about IP allowlisting, reach out to your account manager.