Automate your trusted IP address updates with Postcoder

It's now even easier to keep your account security settings in step with your infrastructure.

If you're making requests to Postcoder via a server-side integration, the IP addresses those requests originate from may change as your compute resources are scaled.

Postcoder's new API endpoint lets you manage your trusted IP address ranges as part of your provisioning process, without signing in to the Postcoder admin area each time.

What are trusted IP address ranges?

Trusted IP address ranges are designed for server-side integrations, where requests to Postcoder come from your infrastructure rather than directly from a user's device. Requests from these IP addresses aren't subject to your chosen rate limit.

Until now, trusted IP address ranges could only be managed through the Postcoder admin area. That's straightforward when your IP addresses rarely change, but less so when your infrastructure creates or replaces compute resources automatically.

Why we added this endpoint

We added this endpoint in response to customer feedback. If the platform running your application or website scales automatically, you won't always know the public IP addresses of new compute resources until they're up and running.

Previously, that meant a manual step: wait for the new infrastructure to start, get the relevant IP addresses, then sign in to the Postcoder admin area to add them to your trusted IP address ranges.

The new API endpoint lets you handle this process automatically. Once a new compute resource is running and its IP address is known, your provisioning script can register the address before your application starts making requests. Similarly, when a resource is no longer needed, your script can remove its IP address too.

It's one less manual task during scaling events and helps keep your account security settings aligned with the infrastructure you're actually running.

How it works

The new security/ipranges endpoint lets you list, add and delete trusted IP addresses or address ranges. Access is controlled through personal access tokens, which you can create and revoke in your account settings. Separate read and write permissions let you choose whether a token can only view your trusted IP address ranges or make changes too.

Getting started

The API endpoint is available now and is free to use. Create a personal access token with the permissions you need, then use the API reference to help you build it into your provisioning process.

If you have any questions about the endpoint or want help integrating it, the Postcoder support team is always happy to help - just get in touch.