Webhook Source IPs

Alloy sends webhook requests from a fixed set of source IP addresses. If your webhook endpoint sits behind a firewall or allowlist, add these addresses so Alloy's delivery requests are not blocked.

Allowlisting is configured entirely on your own infrastructure. There are no required corresponding settings in Alloy. Add the addresses to your firewall, security group, or ingress rules using whatever tooling your network stack provides.

Note: IP allowlisting is a network control, not an authentication mechanism. Source IPs can change, and an allowlisted IP does not prove a request actually originated from Alloy. To authenticate inbound webhooks, configure one of Alloy's webhook authentication methods (see Authentication Types). Treat allowlisting as a complement to authentication, not a replacement for it.

US

EU