Authentication

Update IP Allowlist

Registers the IP ranges (CIDR notation) allowed to call the API with your credentials. The client is taken from the access token, so you can only change your own allowlist.

The list you send replaces the current one completely. To add an IP, send the full list including the existing ranges.

Request

Field	Type	Required	Description
Authorization	Header	Yes	`Bearer <access_token>` obtained from POST /api/v1/client/token.

Request Body

Field	Type	Required	Description
allowedIpRanges	array of strings	Yes	IP ranges in CIDR notation. IPv4 and IPv6 are supported, e.g. `203.0.113.10/32` (a single IP) or `198.51.100.0/24` (a range).

Security recommendation: the example below uses 0.0.0.0/0 and ::/0, which accept connections from any IP. It is valid, but we strongly recommend registering only the public IPs of the servers that connect to Kravata, e.g. ["203.0.113.10/32", "203.0.113.11/32"].

Response

Field	Description
id	Identifier of your security policy.
partnerClientId	Your client identifier.
realmName	Authentication realm of your client.
allowedIpRanges	The IP ranges now in effect.
certSerial / subjectCn	Serial number and common name of your registered mTLS certificate, or `null`.
issuedAt / expiresAt / revokedAt	Validity of your mTLS certificate, or `null`.
createdAt / updatedAt	Timestamps of the policy.

Important

Include the IP you are calling from. If the new list does not contain it, your next requests are rejected, including calls to this endpoint.
An empty list ([]) blocks all IPs.
Entries that are not valid CIDR ranges are ignored when the allowlist is checked; verify each range before sending it.
If you lock yourself out, contact Kravata to restore access.

Errors

Status	When
400	Invalid request body.
401	Missing, invalid or expired access token.
403	The token is not a client (partner) token.

PUT

api

client

security

ips

Update IP Allowlist

curl --request PUT \
  --url https://test-api-kore.kravata.co/api/v1/client/security/ips \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowedIpRanges": [
    "0.0.0.0/0",
    "::/0"
  ]
}
'

import requests

url = "https://test-api-kore.kravata.co/api/v1/client/security/ips"

payload = { "allowedIpRanges": ["0.0.0.0/0", "::/0"] }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({allowedIpRanges: ['0.0.0.0/0', '::/0']})
};

fetch('https://test-api-kore.kravata.co/api/v1/client/security/ips', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://test-api-kore.kravata.co/api/v1/client/security/ips",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'allowedIpRanges' => [
        '0.0.0.0/0',
        '::/0'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://test-api-kore.kravata.co/api/v1/client/security/ips"

	payload := strings.NewReader("{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://test-api-kore.kravata.co/api/v1/client/security/ips")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://test-api-kore.kravata.co/api/v1/client/security/ips")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "9a2dd1a8-cd19-4005-9505-dd0beb9b8e68",
  "partnerClientId": "4e1f6c2a-9b3d-4f7e-8a21-6c5d0b9e3f12",
  "realmName": "master",
  "allowedIpRanges": [
    "0.0.0.0/0",
    "::/0"
  ],
  "certSerial": null,
  "subjectCn": null,
  "issuedAt": null,
  "expiresAt": null,
  "revokedAt": null,
  "createdAt": "2026-10-01T05:13:42.520183Z",
  "updatedAt": "2026-10-01T05:13:42.520183Z"
}

Authorizations

Authorization

string

header

required

Access token from POST /api/v1/client/token.

Body

application/json

allowedIpRanges

string[]

Response

200 - application/json

string

partnerClientId

string

realmName

string

allowedIpRanges

string[]

certSerial

any

subjectCn

any

issuedAt

any

expiresAt

any

revokedAt

any

createdAt

string

updatedAt

string

Update IP Allowlist

curl --request PUT \
  --url https://test-api-kore.kravata.co/api/v1/client/security/ips \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowedIpRanges": [
    "0.0.0.0/0",
    "::/0"
  ]
}
'

import requests

url = "https://test-api-kore.kravata.co/api/v1/client/security/ips"

payload = { "allowedIpRanges": ["0.0.0.0/0", "::/0"] }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({allowedIpRanges: ['0.0.0.0/0', '::/0']})
};

fetch('https://test-api-kore.kravata.co/api/v1/client/security/ips', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://test-api-kore.kravata.co/api/v1/client/security/ips",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'allowedIpRanges' => [
        '0.0.0.0/0',
        '::/0'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://test-api-kore.kravata.co/api/v1/client/security/ips"

	payload := strings.NewReader("{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://test-api-kore.kravata.co/api/v1/client/security/ips")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://test-api-kore.kravata.co/api/v1/client/security/ips")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowedIpRanges\": [\n    \"0.0.0.0/0\",\n    \"::/0\"\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "9a2dd1a8-cd19-4005-9505-dd0beb9b8e68",
  "partnerClientId": "4e1f6c2a-9b3d-4f7e-8a21-6c5d0b9e3f12",
  "realmName": "master",
  "allowedIpRanges": [
    "0.0.0.0/0",
    "::/0"
  ],
  "certSerial": null,
  "subjectCn": null,
  "issuedAt": null,
  "expiresAt": null,
  "revokedAt": null,
  "createdAt": "2026-10-01T05:13:42.520183Z",
  "updatedAt": "2026-10-01T05:13:42.520183Z"
}

Guides

API reference

Update IP Allowlist

Request

Request Body

Response

Important

Errors

Authorizations

Body

Response