Sign in

v56

latestOpenAPI 3.0.0raw.githubusercontent.com2026-08-03113163377.5 KB
Token

Update token IP allowlist

Replace the IP CIDR allowlist for an auth token. Empty array clears the allowlist (unrestricted). Only callable from the main account session; subkey sessions cannot modify token allowlists.

put/account/tokens/{lookup_id}/allowed-cidrs

Path parameters

lookup_idstring required

Token lookup ID

Request body

allowed_cidrsstring[]

Full replacement list. Empty = unrestricted.

Example request

{
  "allowed_cidrs": [
    "[\"203.0.113.0/24\"",
    "\"198.51.100.42/32\"]"
  ]
}

Response

Updated token details

allowed_cidrsstring[]

IP CIDR allowlist; empty means unrestricted

created_atinteger

Token creation timestamp (nanoseconds since epoch)

expiry_atinteger

Expiration timestamp (nanoseconds since epoch)

kindstring

Token type (jwt, api_key, etc.)

last_updated_atinteger

Last modification timestamp (nanoseconds since epoch)

lookup_idstring

Identifier used for the token lookup

namestring

User-provided token name

revoked_atinteger

Revocation timestamp (nanoseconds since epoch, 0 if not revoked)

token_idstring

Unique ID for the auth token

Example response

{
  "allowed_cidrs": [
    "[\"203.0.113.0/24\"]"
  ],
  "created_at": 1640995200,
  "expiry_at": 1672531200,
  "last_updated_at": 1640995200,
  "lookup_id": "uuid-123",
  "name": "My API Token",
  "token_id": "token_123"
}