---
title: "Create an IP address or CIDR block in the Access List"
method: POST
path: "/groups/{groupId}/apps/{appId}/security/access_list"
tags: ["security"]
---

# Create an IP address or CIDR block in the Access List

`POST /groups/{groupId}/apps/{appId}/security/access_list`

Create an IP address or CIDR block in the Access List for your App Services
app.

## Request body

- object
  - `address` string, required — The value of the IP address or CIDR block.
  - `comment` string — An optional comment included in the Access List entry.

## Response `201`

- object
  - `_id` string, ObjectID — ObjectID
  - `address` string
  - `ip` string, net.IP — net.IP
  - `network` string, net.IPNet — net.IPNet
  - `comment` string

## Changes

- **2023-02-13** (v3) `40245591eba9` — 1 breaking
  - added required request body

[Change history](https://skmtc.dev/mongodb/apis/mongodb-atlas-app-services-admin-api/changes/groups/:groupId/apps/:appId/security/access_list/post.md)

---

[API](https://skmtc.dev/mongodb/apis/mongodb-atlas-app-services-admin-api.md) · [All operations](https://skmtc.dev/mongodb/apis/mongodb-atlas-app-services-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mongodb/mongodb-atlas-app-services-admin-api/revisions/1365ab72bc03/schema)