Skip to main content

Source IP addresses

Webhook requests to your endpoint always originate from a fixed set of Addison Lee IP addresses. If your endpoint sits behind a firewall or you restrict inbound traffic, allowlist these addresses so status updates are not dropped.

Allowlisting the source IPs is a network control, not a replacement for authentication. Continue to verify the HTTP Basic Auth credentials on every request — see Overview → Authentication.

Production​

Production webhooks are sent from these addresses:

IP address
35.177.101.54
18.135.182.119
18.134.214.230

Sandbox​

Sandbox webhooks are sent from this address:

IP address
3.8.73.152

Notes​

  • Treat this list as authoritative but subject to change — review it before making firewall changes, and prefer allowlisting all listed addresses rather than a single one.
  • The addresses above are for inbound webhook delivery. Outbound calls you make to the order API use the base URLs in the API reference, not these IPs.