Key points
- IP allowlists are now available in beta within the Claude Console for organizational security.
- The feature supports up to 1,000 IPv4 or IPv6 addresses and CIDR ranges per organization.
- Requests originating from addresses not on the allowlist are automatically refused by covered services.
Anthropic added IP allowlist capabilities to the Claude Console in beta on 5 November 2026.reported This feature allows organizations to restrict which network addresses can access their covered services.This update lets companies block API requests from unknown locations, adding a layer of security to their AI services.Anthropic's beta IP allowlist feature enables network-level access control for Claude Console organizations, mitigating leaked key risks. According to the release notes, requests from addresses not on the list are refused.reported This mechanism limits where a leaked API key can be used.
Evidence: reported
Claude API Release Notes page updated: We’ve added the enforcement_status and enforcement_actions fields to user profiles, so youpagewatch-anthropic
Evidence: reported
Claude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. Rpagewatch-anthropic
What it does
The IP allowlist feature blocks incoming requests that do not originate from approved network addresses. Organizations can add IPv4 and IPv6 addresses or CIDR ranges to the allowed list.reported The system enforces these rules at the service level. If a request comes from an unlisted address, the service refuses it. This provides an additional layer of access control beyond API key authentication.
Evidence: reported
Claude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. Rpagewatch-anthropic
How to get it
The IP allowlist feature is available in beta. Users can set it up directly in the Claude Console. The release notes direct users to a separate "IP allowlisting" document for details on what services are covered and how to configure the settings. No pricing changes were mentioned in the release notes for this feature.
Limits
Each organization can add up to 1,000 addresses or CIDR ranges to their allowlist.reported The feature is currently in beta, which may indicate limited availability or evolving functionality. The release notes do not specify which services are covered; users must consult the linked documentation for that information. There are no stated performance limits for the allowlist enforcement itself.
Evidence: reported
Claude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. Rpagewatch-anthropic
The takeaway
This feature addresses a common security gap where stolen API keys can be used from any location. By tying access to specific IP ranges, organizations can reduce the impact of credential leaks. Developers should test their infrastructure’s IP stability before enabling the feature. The beta status suggests monitoring for changes in behavior or coverage.
Building on this
Data science teams can use IP allowlists to secure model endpoints in production environments. Integrating this with existing network security policies can create a defense-in-depth strategy. Teams should audit their current API key usage patterns to identify which IPs need whitelisting. The feature complements other security controls by adding network-level restrictions.
Why it matters
- Reduces the blast radius of leaked API keys by restricting access to known network locations.
- Provides an additional security control beyond API key management for enterprise deployments.
- Allows organizations to enforce network-level access policies for AI service consumption.
- Helps meet compliance requirements that mandate restricted access to sensitive data processing endpoints.
Topics: Anthropic, Claude, API security, IP allowlist, beta features
Updated
Then / now / next
API key authentication was the primary method for controlling access to Claude services.
Organizations can add IP allowlists to restrict access to specific network addresses.
Monitor for updates to the beta feature and expanded service coverage in the documentation.
Story timeline
- Then API key authentication was the primary method for controlling access to Claude services.
- 05 Nov 2026 My psychophysics as a bilateral cochlear implant user
- 05 Nov 2026 No AI agent scores above 12 percent on SemiAnalysis' new real-world work benchmark
- 05 Nov 2026 Claude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. R
- 05 Nov 2026 Gemini Omni 1.2 Flash: Fast and cost-effective with longer clips
- 05 Nov 2026 Transform a quick drawing into a live app with Gemini.
- 05 Nov 2026 Android Auto’s latest Gemini failing keeps asking ‘who do you want to call’
- 05 Nov 2026 Gemini Omni 1.2 Flash: Fast and cost-effective with longer clips
- 05 Nov 2026 Claude API Release Notes page updated: You can now sign a member of your Claude Enterprise (claude.ai) organization out of Claude
- 05 Nov 2026 Claude can now analyze your spending with its new Personal Finance tool
- 05 Nov 2026 Claude AI can plug directly into your bank account
- 05 Nov 2026 Now Claude can help with your finances too
- 05 Nov 2026 Claude’s new Personal Finance tool aims to help analyze your spending – read-only, of course
- 05 Nov 2026 Winner of the Prix Goncourt literary prize admits to using AI
- 05 Nov 2026 Anthropic launches Personal Finance in Claude, letting users connect bank and credit card accounts via Plaid with read-only access to analyze spending trends (Radhika Rajkumar/ZDNET)
- 05 Nov 2026 Google's Gemini Omni 1.2 Flash stretches AI video clips to 15 seconds and cuts pricing by 30 percent
- 05 Nov 2026 Ads in Chatbots Have Arrived. Here’s What’s Working—and What’s Not
- 05 Nov 2026 Google: Schools can keep search while skipping Gemini, but AI search is non-negotiable
- 05 Nov 2026 Claude Code sends your email address to websites
- 05 Nov 2026 Claude API Release Notes page updated: We’ve added the enforcement_status and enforcement_actions fields to user profiles, so you
- 06 Nov 2026 Anthropic News page updated: 284
- 06 Nov 2026 Anthropic News page updated: 282
- 06 Nov 2026 Artificial Analysis says Inkling 2 Small matches Gemini 3.8 Flash (high) in its index and would be the top open model outside China once its weights are out (Artificial Analysis)
- 06 Nov 2026 Google rolls out Gemini Omni 1.2 Flash, which creates clips up to 15 seconds, vs. 10 seconds with Omni 1.1, has better reference adherence, and costs 30% less (Matthias Bastian/The Decoder)
- Now Organizations can add IP allowlists to restrict access to specific network addresses.
- Next Monitor for updates to the beta feature and expanded service coverage in the documentation.
The strongest doubt
Counterpoint from the sources
None.
For readers
Developers
- Integrate IP allowlist checks into deployment pipelines to ensure infrastructure compatibility.
- Test API requests from various network locations to verify allowlist enforcement.
Business
- Assess the security posture of AI service usage to determine if IP allowlisting is needed.
- Review compliance requirements that may mandate network-level access controls for AI services.
Policy
- Consider how IP allowlisting fits into broader data governance and security frameworks.
- Evaluate the impact of network restrictions on access to AI services for remote teams.
Ask the article
Local keyword search of this article; no generated answers.Did this article give you the evidence you needed?
Your choice stays on this device. No public tally.Terms in this story
IP allowlist
A list of approved IP addresses or CIDR ranges that are permitted to access a service.
CIDR
Classless Inter-Domain Routing, a method for specifying groups of IP addresses.
API key
A credential used to authenticate requests to an application programming interface.
Beta
A pre-release version of software available for testing and feedback.
Questions readers ask
How many IP addresses can I add to the allowlist?
You can add up to 1,000 IPv4 or IPv6 addresses or CIDR ranges per organization.
Does this feature work with all Claude services?
The release notes do not specify which services are covered; users should check the IP allowlisting documentation.
Is this feature available for free?
The release notes do not mention any pricing changes for this beta feature.
Connected stories
Reading receipt
- IP allowlists are now available in beta within the Claude Console for organizational security.
- The feature supports up to 1,000 IPv4 or IPv6 addresses and CIDR ranges per organization.
- Requests originating from addresses not on the allowlist are automatically refused by covered services.
Still open: Which specific Claude services are covered by the IP allowlist feature?
Still open: How will the beta feature evolve in terms of functionality and coverage?