Static IP Addresses

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usefini.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Static IP Addresses

> The fixed set of addresses Fini's outbound calls originate from, for customers who whitelist traffic in their firewall.

When Fini executes an [Action](/en/api-reference/actions) against your systems, looking up an order, checking a subscription, resetting a password, it makes an outbound HTTPS call to your API. If your firewall restricts inbound traffic by source IP, you'll need to allow the addresses those calls come from. Fini routes all outbound traffic through a fixed set of static IPs, so you can whitelist them once and never revisit it.

<Info>
  These addresses cover **outbound** calls only, the requests Fini sends to your systems when running Actions. They don't affect how you send requests to the Fini API, and they don't change how your widget or helpdesk integration connects. If you only call Fini and Fini never calls you back, you don't need to whitelist anything.
</Info>

## IPs to whitelist

Allow all of the following addresses in your firewall:

~~~text theme={null}
34.7.65.87
34.6.76.204
34.91.105.49
34.32.161.63
~~~

Traffic can originate from any of the four. They exist for redundancy and load distribution, so a given request may arrive from any one of them. The addresses are hosted in Google Cloud's `europe-west4` region (Eemshaven, Netherlands). They're static and won't change without advance notice.

<Warning>
  Whitelist all four addresses, not a subset. Allowing only one or two causes intermittent failures that are hard to diagnose, calls succeed when they happen to route through an allowed IP and time out when they don't.
</Warning>

## Setting it up

<Steps>
  <Step title="Add the four IPs to your allowlist">
    Allow inbound HTTPS (port 443) from each of the four addresses on the endpoints your Actions call.
  </Step>

  <Step title="Confirm with your Fini contact">
    Let us know once the rules are live. We'll run a test Action against your endpoint to confirm the call lands.
  </Step>

  <Step title="Verify the call succeeds">
    A successful test means the route is open. If it times out, the allowlist usually hasn't propagated yet or one of the four IPs is missing, see below.
  </Step>
</Steps>

<Note>
  If you're integrating against a sandbox, staging API, or staging warehouse first, ask your Fini contact for the staging IPs. They're a separate, smaller set and aren't listed here. For the full warehouse setup pattern, see [Database and Warehouse Connections](/en/api-reference/database-warehouses).
</Note>

## Why calls aren't getting through

<AccordionGroup>
  <Accordion title="Only some calls succeed" icon="arrows-split-up-and-left">
    You've likely whitelisted a subset of the four addresses. Traffic distributes across all of them, so partial allowlisting produces intermittent timeouts. Add all four.
  </Accordion>

  <Accordion title="Every call times out" icon="clock">
    Either the rules haven't propagated on your side, or the firewall is filtering on the wrong port or endpoint. Confirm the rules apply to the exact host and path your Actions hit, on port 443.
  </Accordion>

  <Accordion title="It worked before and suddenly stopped" icon="triangle-exclamation">
    The addresses don't rotate silently, we notify before any change. A sudden break is almost always a firewall rule that was edited or expired on your side, or an endpoint that moved. Re-check the allowlist, then reach out to your Fini contact.
  </Accordion>
</AccordionGroup>

## Related

<CardGroup cols={2}>
  <Card title="Actions" icon="bolt" href="/en/api-reference/actions">
    The outbound calls Fini makes to your systems. These are the requests that originate from the static IPs.
  </Card>

  <Card title="Database and Warehouse Connections" icon="database" href="/en/api-reference/database-warehouses">
    How to put a scoped HTTPS endpoint in front of Redshift, Snowflake, BigQuery, Postgres, or another warehouse.
  </Card>

  <Card title="API keys" icon="key" href="/en/deploy/api-keys">
    Public API access for your own backend integrations with Fini.
  </Card>
</CardGroup>


## Related topics

- [Database and Warehouse Connections](/en/api-reference/database-warehouses.md)
- [Email](/en/deploy/email.md)
- [End-to-end: order status and changes](/en/walkthroughs/order-status-and-changes.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.