---
title: "Sets the IP CIDR allowlist for this Company."
method: PUT
path: "/companies/{identifier}/auth/cidr-blocks"
tags: ["companies"]
---

# Sets the IP CIDR allowlist for this Company.

`PUT /companies/{identifier}/auth/cidr-blocks`

Replaces the company's IP allowlist; an empty list removes all restrictions. The update is rejected with a 400 if more than 5% of the company's currently-active agents would be blocked by the new list, or if the new list would block the caller; use the validate endpoint to preview the impact before applying. IP allowlisting is not supported for companies connected via AWS PrivateLink; leave the allowlist empty for those companies.
Requires the privilege [`COMPANY_SECURITY_WRITE`](https://www.gremlin.com/docs/user-management/access-control/#privileges)

## Path parameters

- `identifier` string, required

## Request body

- UpdateCompanyCidrBlocksRequest — Sets the CIDR allowlist for this company. Pass an empty list to remove all IP restrictions. IP allowlisting is not supported for companies connected via AWS PrivateLink; leave the allowlist empty for those companies.
  - `cidrBlocks` string[], required — IPv4 or IPv6 CIDR blocks allowed to access the API. An empty list removes IP restrictions.

## Response `default`

default response

## Other responses

- `401` — Authorization header missing or malformed. Please provide proper credentials in the authorization header.
- `403` — User requires privilege: COMPANY_SECURITY_WRITE

---

[API](https://skmtc.net/gremlin/apis/gremlin-api.md) · [All operations](https://skmtc.net/gremlin/apis/gremlin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gremlin/gremlin-api/versions/36ee938323f0/schema)