Safety first! With our IP Access Restrictions feature, you can boost the security of your Hudu platform. This enhancement allows admins to specify which IP addresses can access the Hudu environment, providing an added layer of protection against unauthorized access.
- Enhanced Security: By whitelisting specific IPs, you ensure only authorized personnel have access.
- Centralized IP Management: All configurations can be made directly from the Hudu admin page.
IP Access Control applies to signed-in web sessions, Hudu external apps (browser extensions and the mobile app), and MCP connections. Publicly shared pages are excluded. As of version 2.47, REST API access is no longer controlled by this allowed list. Instead, set allowed IP addresses on each API key in Admin → API Keys.
Navigating to IP Restrictions Settings
- From your dashboard, go to the Hudu admin page.
- Find and click on the "Security" section.
- Look for the "IP Access Control" section.
Setting Up Allowed IP Addresses
- Within the "IP Access Control" section, click "On".
- IP Access Control will not be active until you add at least one IP address.
- Click "New IP Address."
- Input the desired IP address(es).
- Add a description.
- Click "Confirm" to add the IP to the allowed list.
- Optionally, check Disable IP Access Control for Portal Users so portal users are exempt from the set IP restrictions.
Removing/Editing Allowed IP Addresses
- Locate the IP address you wish to remove or edit from the allowed list.
- Click the "Edit" icon to modify or the "Delete" icon to remove the IP.
Setting Allowed IP Addresses for API Keys (v2.47.0 required)
As of version 2.47, each API key's Allowed IP Addresses field is the only place API IP access is managed. The allowed list above no longer applies to the REST API.
- Navigate to Admin → API Keys and create a new key.
- In Allowed IP Addresses, enter one IP address per line.
- Save the key.
API keys can't be edited after they're created, so set allowed IP addresses when you create the key. Leaving the field blank exempts the key from IP access control, which isn't recommended.
Finding the IP Addresses Used by Your API, External Apps, and MCP Connections
Confirm which IP addresses these connections use before enabling or updating your allowed list or creating API keys:
- For custom scripts or automation calling the REST API, check the public IP of the server or service making the calls. Add it to the API key's Allowed IP Addresses.
- For third-party integrations that use an API key, check that provider's documentation for their published outbound IP addresses.
- For Hudu external apps, check the public IP of the device or network they're connecting from.
- For MCP connections, check the public IP of wherever the MCP client is running.