# IP Whitelisting Guide

## Overview

The Fig Markets API implements IP whitelisting as a security measure to ensure that only authorized IP addresses can access your API credentials. This feature helps protect your account from unauthorized access and potential security breaches.

## How IP Whitelisting Works

When you create an API key, you must specify which IP addresses are allowed to use that key. The system will only accept API requests from IP addresses that have been explicitly whitelisted for your specific API key.

### Key Points

- **Per-API-Key Basis**: Each API key has its own whitelist of allowed IP addresses
- **Exact IP Matching**: Currently, the system supports exact IP address matching (CIDR notation support is planned for future releases)
- **Real-time Enforcement**: IP checks are performed on every API request


## Managing IP Whitelists

To manage your IP whitelists, log on to the Fig Markets trading platform, click on your account name in the top right corner and select `API Keys` from the dropdown menu.

![API Keys](/assets/api-keys-menu-item.79cb363c0d004bac16372b6e5f4b7599db1c77ced8eedf9f5c4d353b7a956a30.9c1bb791.png)

You will then see a list of your API keys, click on the API key you want to manage the IP whitelist for and select the `IP Whitelist` tab.

You will then see a list of your IP whitelists, click on the `Add IP` button to add a new IP address to the whitelist.

![IP Whitelist](/assets/api-keys-modal-whitelist-tab.edf783c7c5a727dec302ce5d9b21e14b229d69cab740930bbab0625dc6b05f1e.9c1bb791.png)