> ## Documentation Index
> Fetch the complete documentation index at: https://docs.meetjamie.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# IP allowlisting

> Restrict access to your Jamie workspace to approved IP ranges

IP allowlisting restricts access to your workspace to the IP ranges you define. Requests from any other address are rejected, whether they come from the web app, the desktop app, or the mobile app.

IP allowlisting is available on the **Enterprise** plan and is configured by workspace admins under **Settings → Security**.

## How it works

Once at least one range is saved, Jamie checks the client IP address of every request against the list.

* **Sign-in.** Members of your workspace can only sign in from an allowed address. This applies to every sign-in method: email code, Google, Microsoft, Apple, and SSO. A blocked attempt shows *Login blocked: your IP address is not allowed.*
* **Signed-in sessions.** Every request from the web, desktop, and mobile apps is checked, including meeting recording and Ask AI. Requests from outside the allowlist are rejected with *Access denied: your IP address is not allowed.*
* **Moving networks.** A member who leaves an allowed network loses access on their next request and regains it as soon as they are back on one. There is nothing to revoke or re-issue.

<Note>
  The allowlist applies to signed-in users. Requests authenticated with an [API key](/developers/api/access-and-security) and [MCP](/integrations/mcp) connections are not restricted by the allowlist.
</Note>

## Set up the allowlist

<Steps>
  <Step title="Open the IP Allowlist settings">
    Go to **Settings → Security** and scroll to **IP Allowlist**.
  </Step>

  <Step title="Enter your ranges">
    Enter one range per line, or separate them with commas. Both IPv4 and IPv6 are supported, in CIDR notation. A single address without a prefix is treated as exactly that address.

    ```text theme={null}
    203.0.113.0/24
    198.51.100.42
    2001:db8:1234::/48
    ```
  </Step>

  <Step title="Test before saving">
    Click **Test**. Jamie compares the ranges against every IP address that accessed your workspace in the last 7 days and lists any that would be blocked. Fix the list until the check reports that all recent addresses are covered.
  </Step>

  <Step title="Save">
    Click **Save**. The allowlist takes effect immediately for every member of the workspace.
  </Step>
</Steps>

<Warning>
  Make sure your own current IP address is included before you save. An allowlist that excludes you locks everyone out, including you, and you will not be able to sign in to fix it. If that happens, contact your account manager or [support@meetjamie.ai](mailto:support@meetjamie.ai).
</Warning>

<Tip>
  VPNs and Zero Trust clients such as Cloudflare WARP often route traffic over IPv6. If your team uses them, include both the IPv4 and the IPv6 ranges they exit from.
</Tip>

## Turn off the allowlist

Clear the field and click **Save**. An empty allowlist allows all IP addresses.

## Audit log

Changes to the allowlist and the sign-ins it blocks are recorded in the [audit log](/enterprise/audit-logs):

| Event                            | Description                                                                 |
| -------------------------------- | --------------------------------------------------------------------------- |
| `workspace.ip_allowlist_changed` | The allowlist was changed. The entry records the previous and the new list. |
| `auth.login_failed`              | A sign-in was blocked. The entry's reason is `ip_not_allowed`.              |

## Questions?

If you have questions about IP allowlisting, reach out to your account manager.