---
title: "Get the IP allowlist"
method: GET
path: "/api/v1/ip-allowlist"
tags: ["IP Allowlist"]
---

# Get the IP allowlist

`GET /api/v1/ip-allowlist`

## Request

- Base URL: `https://omniapp.co` (the document declares no server; this is the origin it was published from)
- URL: `https://omniapp.co/api/v1/ip-allowlist`
- Auth: HTTP bearer

Get the organization's IP allowlist: whether it is enforced, the support and SCIM bypasses, and the allowed addresses with their notes. Requires organization admin access.

## Response `200`

The current IP allowlist settings.

- IpAllowlist
  - `allowsSupport` boolean, required: Whether Omni support staff, signing in through Omni's own support login, can reach the organization from outside the list.
  - `enabled` boolean, required: Whether the allowlist is enforced. While false the entries are kept, but no address is blocked.
  - `entries` IpAllowlistEntry[], required: The allowed addresses and ranges, in the order given.
    - `address` string, required: A public IPv4 or IPv6 address or CIDR range, as stored: always network/prefix, so a single address reads 198.51.100.7/32.
    - `note` string, nullable, required: What the entry is for, or null when it has no note.
  - `exemptsScim` boolean, required: Whether SCIM provisioning requests (everything under /api/scim/) are accepted from any address. They still need an organization API key.

## Other responses

- `400`: Missing or malformed Authorization header.
- `403`: Invalid API key, or the caller is not an organization admin.

## Changes

- **2026-10-10** `6f3dfc5c9610`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/omniapp/apis/omni-api/changes/api/v1/ip-allowlist/get.md)

---

[API](https://skmtc.dev/omniapp/apis/omni-api.md) - [All operations](https://skmtc.dev/omniapp/apis/omni-api/llms.txt) - [OpenAPI document](https://skmtc.dev/omniapp/apis/omni-api/revisions/76b40ebc2292?raw)