Authentication
IP allowlisting
Restrict a key to specific source IPs for defence in depth.
How it works
Set a per-key IP allowlist on your store's Developers tab. If a key has an allowlist, requests from any other IP are rejected with 403 (ip_not_allowed).
Allowlist the stable egress IPs of your servers. Leave it empty to allow any source IP.