Claude Console IP allowlist in beta limits where an API key can be used
Organizations can set an IP allowlist in the Claude Console, in beta. Requests to covered services from addresses not on the list are refused, which limits where a leaked API key works. It takes IPv4 and IPv6 addresses or CIDR ranges, up to 1,000 per organization.