> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dify.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Access Control

> Restrict app access to trusted networks with reusable IP policies

IP access control restricts app access based on the public IP address of each incoming request. With IP access control, you can limit access to your apps to trusted networks, such as your office network or specific servers.

You define the allowed addresses in an **IP policy** and choose which access points it protects in each app’s **Access Control**.

> [!NOTE]
>
> IP access control is available on the Professional and Team plans.
>
> Only workspace owners and admins can create, edit, or delete IP policies. Editors with permission to manage an app's access points can configure its Access Control using existing policies.

## Manage IP Policies

You can manage IP policies under **Settings** > **IP Policies** in your workspace. The same policy can be applied to multiple apps in that workspace.

### Create an IP Policy

Click **Create an IP policy**, or **Add** if your workspace already has policies. Enter a **Name** and add the addresses you want to allow to the **Allowlist**:

* To allow the network you're currently using, click **Add it** next to your current IP address.
* Ask your network or system administrator for the public IP addresses of the networks or servers that need access to your app.

You can enter individual IPv4 or IPv6 addresses, or a range in CIDR notation. Adding a range allows requests from every IP address in that range.

Click **Create**. You can then [apply the policy to an app](#configure-app-access-control) in its **Access Control** settings.

### Edit an IP Policy

In **IP Policies**, select a policy, update its **Allowlist**, and click **Save**.

Changes affect all apps using the policy and take effect without republishing.

### Delete an IP Policy

Deletion is permanent and removes IP protection from all apps using the policy.

In **IP Policies**, open the policy's **…** menu, select **Delete**, and confirm.

## Configure App Access Control

Open your app from **Studio**, or your Agent from **Agents**, then go to its **Access Point** tab. You’ll find **Access Control** in the top-right corner.

### Set Up Access Control

1. Under **IP Policy**, select the policy you want to use.
2. Under **Apply to**, turn on the access points you want this IP policy to protect, then click **Save**. Unselected access points remain unrestricted by this policy.

To check your setup, test a selected access point from an allowed network and one outside the allowed range.

### Change the Policy or Protected Access Points

In **Access Control**, click **Edit**, update your selections under **IP Policy** or **Apply to**, and click **Save**.

Saving also re-enables paused Access Control.

### Pause or Resume Access Control

In **Access Control**, turn off **Restrict by IP address** and confirm. Turn the switch back on to resume.

While paused, IP restrictions stop applying, but your settings are kept.

> [!WARNING]
>
> IP protection also stops if your Professional or Team subscription becomes inactive. Your settings are kept. Renew or upgrade to either plan to use IP protection again.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.