---
title: "List IP allow lists"
method: GET
path: "/ip_allow_lists"
tags: ["IP Allow Lists"]
---

# List IP allow lists

`GET /ip_allow_lists`

<!-- theme: warning -->

> ### Early Access
> This API is in Early Access and may change at any time. You must pass the `X-EARLY-ACCESS: ip-allow-lists` header on every request, and your account must be enrolled in the IP Allow Lists Early Access program. Contact your PagerDuty account team to request access.

Return all IP allow lists for the account.

Only Account Owners, Global Admins, and Account API Keys can call this endpoint.

Scoped OAuth requires: `ip_allow_lists.read`

## Headers

- `X-EARLY-ACCESS` 'ip-allow-lists', required
- `Accept` string, required

## Response `200`

IP allow lists retrieved successfully.

- object
  - `ip_allow_lists` IpAllowList[], required
    - `id` string — Unique identifier for the allow list (e.g. `AGIS47HYOV6BDODBTMQKMPQPHU`).
    - `type` 'ip_allow_list' — A string that determines the schema of the object.
    - `state` 'enabled' | 'disabled', required — Whether the allow list is enforced for the account. When `enabled`, only requests from IPs matching one of the `cidr_entries` are permitted to access the subdomain. When `disabled`, the allow list is stored but not enforced.
    - `cidr_entries` CidrEntry[], required — The CIDR ranges that are allowed when the allow list is `enabled`. Must be non-empty when `state` is `enabled`.
      - `cidr` string, required — An IPv4 CIDR range. Each octet must be `0`-`255` and the mask must be between `1` and `32`.
      - `description` string, nullable — An optional human-readable description for the entry. Limited to 64 characters.

## Other responses

- `401` — Caller did not supply credentials or did not provide the correct credentials. If you are using an API key, it may be invalid or your Authorization header may be malformed.
- `403` — Caller is not authorized to view the requested resource. While your authentication is valid, the authenticated user or token does not have permission to perform this action.
- `404` — The requested resource was not found.
- `429` — Too many requests have been made, the rate limit has been reached.
- `500` — Internal Server Error the PagerDuty server experienced an error.

---

[API](https://skmtc.net/pagerduty/apis/rest-api.md) · [All operations](https://skmtc.net/pagerduty/apis/rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pagerduty/rest-api/revisions/b679a8f3f02c/schema)