Skip to main content

Granular exclusions for IP access control

Core Web AppSecurity & credentials

IP access control now applies across the web app, REST API, external apps, and MCP. Right now it's all or nothing, there's no way to exclude just one of these.

Ask: let admins turn IP access control on or off independently for each area, for example:

mobile app

REST API

external apps

MCP

Why: some use cases, like mobile devices on cellular networks, can't reliably work within a fixed IP range. Right now the only workaround is disabling IP access control entirely, which weakens security everywhere else just to accommodate one surface.

1 comment

Log in to comment and vote

Comments1

  • Sapphire Pinwheel

    •

    Sep 23

    We had a great setup with Copilot to leverage it for documentation, gap analysis, finding docs for specific tickets, and documentation creation from screenshots and prompts, but now we can’t use it unless we disable the IP restriction. allowing MCP access but still restricting other IP access would restore this functionality.