At a glance: Protect your AppsFlyer account by defining an API allowlist.
Overview
Protect your data from unauthorized access by setting up an API allowlist that specifies the IP addresses that can make API calls to your AppsFlyer account. Once your allowlist is active, only API calls originating from those IP addresses will be permitted while calls from all other IP addresses will be denied.
Note
- Only admins can access and manage the allowlist.
- Use of the allowlist is optional and is inactive by default.
- Activation of the allowlist is at the account level and applies to all apps in the account.
Set up your API allowlist
Set up the allowlist
To set up and activate the API allowlist:
- From the top bar, open the account menu (email address dropdown) > Security center.
- In the API allowlist section, click Manage API allowlist.
- Enter an IP address or range of IP addresses in standard format:
- Examples:
192.168.1.1
,185.114.120.140
- To enter a range of IP addresses, use this format:
185.114.120.1/32
(where185.114.120.1
is the first address in the range and185.114.120.32
is the last address in the range).
- Examples:
- Click Apply.
- [Optional] Click + Add to add an additional IP address or range to the list.
- Click the Save list button.
- Set the allowlist to Active.
Note: The allowlist must contain at least one IP address or range before you can save and activate it.
Edit the allowlist
You can add or delete IP addresses from the allowlist at any time (whether or not the list is active).
To add an IP address or range:
- From the top bar, open the account menu (email address dropdown) > Security center.
- In the API allowlist section, click Manage API allowlist.
- Click + Add to add an IP address or range to the list.
- Enter an IP address or range.
- Click Apply.
- Be sure to save your changes by clicking the Save list button.
Note: The list status (active or inactive) will not change when you save the list. Be sure to check the status of the Active toggle and activate/deactivate if necessary.
To delete an IP address or range:
- From the top bar, open the account menu (email address dropdown) > Security center.
- In the API allowlist section, click Manage API allowlist.
- Click the trash icon next to the IP address you want to delete.
- In the confirmation popup, click Delete.
- Be sure to save your changes by clicking the Save list button.
Allowlist specifications
- To protect your account from unauthorized API calls, the allowlist must be set to Active and include at least one IP address or range.
- The allowlist applies to all AppsFlyer APIs that utilize the V2.0 token. Calls from APIs that use the V1.0 API token will be permitted from all API addresses.
- Up to 20 IP addresses or ranges can be added to the allowlist.