---
title: "Update token IP allowlist"
method: PUT
path: "/account/tokens/{lookup_id}/allowed-cidrs"
tags: ["Token"]
---

# Update token IP allowlist

`PUT /account/tokens/{lookup_id}/allowed-cidrs`

## Request

- Base URL: `https://api.prod.paradex.trade/v1`
- URL: `https://api.prod.paradex.trade/v1/account/tokens/{lookup_id}/allowed-cidrs`
- Auth: API key in header `Authorization`

Replace the IP CIDR allowlist for an auth token. Empty array clears the allowlist (unrestricted). Only callable from the main account session; subkey sessions cannot modify token allowlists.

## Path parameters

- `lookup_id` string, required

## Request body

- RequestsUpdateAllowedCIDRs
  - `allowed_cidrs` string[]: Full replacement list. Empty = unrestricted.

## Response `200`

Updated token details

- ResponsesApiToken
  - `allowed_cidrs` string[]: IP CIDR allowlist; empty means unrestricted
  - `created_at` integer: Token creation timestamp (nanoseconds since epoch)
  - `expiry_at` integer: Expiration timestamp (nanoseconds since epoch)
  - `kind` string: Token type (jwt, api_key, etc.)
  - `last_updated_at` integer: Last modification timestamp (nanoseconds since epoch)
  - `lookup_id` string: Identifier used for the token lookup
  - `name` string: User-provided token name
  - `revoked_at` integer: Revocation timestamp (nanoseconds since epoch, 0 if not revoked)
  - `token_id` string: Unique ID for the auth token

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: IP restrictions not enabled for this account
- `404`: Not Found

## Changes

- **2026-10-22** `f33feb7333ea`: 12 warning
  - added the new `ADDRESS_BOOK_NOT_PARADEX_ACCOUNT` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `400`
  - added the new `ADDRESS_BOOK_NOT_PARADEX_ACCOUNT` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `401`
  - added the new `ADDRESS_BOOK_NOT_PARADEX_ACCOUNT` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `403`
  - added the new `ADDRESS_BOOK_NOT_PARADEX_ACCOUNT` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `404`
  - …8 more
- **2026-10-20** `72c125c93c2b`: 8 warning
  - added the new `SESSION_EXPIRED` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `400`
  - added the new `SESSION_EXPIRED` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `401`
  - added the new `SESSION_EXPIRED` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `403`
  - added the new `SESSION_EXPIRED` enum value to the `error/allOf[#/components/schemas/responses.ErrorCode]/` response property for the response status `404`
  - …4 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/tradeparadex/apis/paradex-rest-api-2/changes/account/tokens/:lookup_id/allowed-cidrs/put.md)

---

[API](https://skmtc.dev/tradeparadex/apis/paradex-rest-api-2.md) - [All operations](https://skmtc.dev/tradeparadex/apis/paradex-rest-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/tradeparadex/apis/paradex-rest-api-2/revisions/f33feb7333ea?raw)