---
title: "Get the IP allowlist"
method: GET
path: "/v1/ip-allowlist"
tags: ["IP Allowlist"]
---

# Get the IP allowlist

`GET /v1/ip-allowlist`

## Request

- Base URL: `https://blobsrus.omniapp.co/api`
- URL: `https://blobsrus.omniapp.co/api/v1/ip-allowlist`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

<Note>
  **Organization Admin** permissions are required for this endpoint.
</Note>

Get the organization's IP allowlist: whether it's enforced, the Omni support and SCIM bypasses, and the allowed addresses with their notes.

## Response `200`

The current IP allowlist settings.

- IpAllowlist
  - `allowsSupport` boolean, required: Whether Omni support staff, signing in through Omni's own support login, can reach the organization from outside the list.
  - `enabled` boolean, required: Whether the allowlist is enforced. While false the entries are kept, but no address is blocked.
  - `entries` object[], required: The allowed addresses and ranges, in the order given.
    - `address` string, required: A public IPv4 or IPv6 address or CIDR range, as stored: always network/prefix, so a single address reads 198.51.100.7/32.
    - `note` string, nullable, required: What the entry is for, or null when it has no note.
  - `exemptsScim` boolean, required: Whether SCIM provisioning requests (everything under /api/scim/) are accepted from any address. They still need an organization API key.

## Other responses

- `400`: Missing or malformed `Authorization` header.
- `403`: Invalid API key, or the caller is not an organization admin.
- `429`: Too Many Requests - Rate limit exceeded (60 requests/minute)
- `500`: Internal Server Error

## Changes

- **2026-11-03** `43290040f88f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/omni/apis/omni-api/changes/v1/ip-allowlist/get.md)

---

[API](https://skmtc.dev/omni/apis/omni-api.md) - [All operations](https://skmtc.dev/omni/apis/omni-api/llms.txt) - [OpenAPI document](https://skmtc.dev/omni/apis/omni-api/revisions/43290040f88f?raw)