Skip to main content
IP whitelisting lets you control which IP addresses can reach your MCP server. When enabled, only requests from approved IPs or MCP clients are allowed — all others receive a 403 Forbidden response. This is useful when you want to limit access to known clients, such as ChatGPT or Claude, or restrict usage to your corporate network.
IP whitelisting is configured per environment. Make sure you configure it for the right environment (e.g., production, staging).

​
Quick MCP Client Selection

For common MCP clients, Alpic maintains up-to-date IP lists so you don’t have to manage them manually. Simply select the clients you want to allow:
MCP ClientIP Source
ChatGPTFetched automatically from OpenAI’s published IP list, refreshed every 15 minutes
ClaudeBased on Anthropic’s published IP addresses, updated with each Alpic release
ChatGPT IPs are fetched dynamically and remain up to date automatically. Claude IPs are updated with Alpic releases, so if Anthropic changes their egress IP ranges, there may be a short delay before the changes are reflected.

​
Custom IPs

You can also add up to 20 custom IP addresses or CIDR ranges per environment. Supported formats:
  • IPv4 addresses (e.g., 203.0.113.10)
  • IPv6 addresses (e.g., 2001:db8::1)
  • IPv4 CIDR ranges (e.g., 203.0.113.0/24)
  • IPv6 CIDR ranges (e.g., 2001:db8::/32)
Custom IPs and MCP client selections work together — a request is allowed if it matches either list.

​
Setup

1

Navigate to Distribution

In your Alpic dashboard, open your project and go to the Distribution tab, then select the Trusted IPs section.
2

Enable IP whitelisting

Toggle the IP whitelist switch to enable the feature.
3

Select MCP clients and/or add custom IPs

Check the MCP clients you want to allow (ChatGPT, Claude), and optionally add custom IP addresses or CIDR ranges.
4

Save

Click Save to apply the changes. The restrictions take effect immediately for new requests.
IPv4-mapped IPv6 addresses (e.g., ::ffff:192.168.1.1) are automatically normalized, so you only need to add the IPv4 form.