> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://developers.brevo.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.brevo.com/_mcp/server.

# IP security & authorization

IP security restricts API access to specific IP addresses. Only requests from whitelisted IPs are authorized, blocking unauthorized access to your account.

## How IP security works

When enabled, Brevo validates the source IP address of each API request. Requests from unauthorized IPs are blocked even if the API key is valid.

## Configure authorized IPs

### Open security settings

Click your name in the top-right corner, then select **Security** from the menu.

### Navigate to Authorized IPs

Go to the **Authorized IPs** section in the Security menu.

![Security settings](/_fern-img/98ed4752335b4e9c5da0a23bb568d20684ca02178b1fae768d1dad10a98dffe9.webp)

### Choose authorization method

Select one of two authorization methods:

**Automatic authorization**

* Brevo automatically reviews IP addresses from API calls
* IPs are authorized after security checks pass
* No manual intervention required

**Email notifications**

* Brevo sends email notifications for unknown IP addresses
* You manually authorize IPs from the notification email
* Requires manual approval for each new IP

### Add IP addresses manually

Manually add specific IP addresses or IP ranges in the **Authorized IPs** tab. Enter IP addresses one per line or use CIDR notation for ranges.

![Authorized IPs](/_fern-img/495b842b9891ea56aa236704e1500ed676a8e6aa7c9905520f95957731dc87b6.webp)

## Block unknown IPs

Enable "Block unknown IP addresses" to automatically reject requests from IPs not in your authorized list. This blocks all unauthorized access attempts.

> **Warning**
>
> When "Block unknown IP addresses" is enabled, API requests from non-whitelisted IPs are rejected immediately. Add your server IPs to the authorized list before enabling this feature.

> **Tip**
>
> Use IP security to restrict API access to known servers and environments — an extra layer of protection beyond API key authentication.