IP and Hostname Restrictions

Merchants can choose to restrict account access to a specific IP address/hostname or a range of IP addresses or hostnames by selecting "Security" in the control panel.

IP restrictions can be set to allow users access to either the control panel, the Server-To-Server API, or both. Once enabled, all access to the control panel and Server-To-Server API will be denied unless the user's IP Address or hostname is added to the allowed list. IP restrictions never apply to transactions submitted via the Transparent Redirect API, and are disabled by default.

Wildcards are allowed in setting up both allowed hostnames and IP addresses. For example, merchants can add "127.0.0.*" as an allowed IP address.