---
title: "List Lithic IP ranges"
method: GET
path: "/v1/ip_ranges"
tags: ["Responder Endpoints"]
---

# List Lithic IP ranges

`GET /v1/ip_ranges`

## Request

- Base URL: `https://sandbox.lithic.com`
- URL: `https://sandbox.lithic.com/v1/ip_ranges`
- Auth: none required

Returns the IP addresses Lithic sends responder requests from (Auth Stream Access, 3DS decisioning, and tokenization decisioning), so you can allowlist them in your firewall. Each environment returns its own set of addresses. Lithic announces new addresses at least 30 days before sending traffic from them. Event webhooks are not sent from these addresses

## Response `200`

Lithic IP ranges

- object
  - `responders` string[], required: IP ranges that responder requests are sent from, in CIDR notation
  - `updated` string, date-time, required: Date and time the IP ranges were last changed

## Other responses

- `429`: Client has exceeded the number of allowed requests in a given time period. | | | |---|---| | Rate limited, too many requests per second | User has exceeded their per second rate limit | | Rate limited, reached daily limit | User has exceeded their daily rate limit | | Rate limited, too many keys tried | One IP has queried too many different API keys |

## Changes

- **2026-10-20** `d18c93725935`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/lithic-com/apis/lithic-developer-api/changes/v1/ip_ranges/get.md)

---

[API](https://skmtc.dev/lithic-com/apis/lithic-developer-api.md) - [All operations](https://skmtc.dev/lithic-com/apis/lithic-developer-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lithic-com/apis/lithic-developer-api/revisions/17d2fbc28992?raw)