Whitelist IP

What it does

Restrict who can reach the agent panel by source IP. The allowed addresses are enforced at the Cloudflare edge — a request from an address that isn’t allowed is blocked before it ever reaches the panel, so no sign-in page is served.

Where to find it

Security & Access → Whitelist IP

How it works with WARP

Your team normally reaches the panel over WARP, and WARP’s exit addresses are always allowed — a built-in baseline you don’t manage and can’t remove. Because of that, a WARP-connected operator can never lock themselves out, no matter what the list contains.

So whitelisting an office IP isn’t about protecting WARP users — it’s precisely what lets an agent sign in from that office without WARP. Add the office’s public IP here, and staff at that location can reach the panel directly.

Tip

There’s no way to lock your whole team out by editing this list — WARP access is always on underneath it. Add an office address whenever you want people at that location to sign in without WARP.

It’s a shared, master-wide list

Your entries don’t stand alone. Every active entry from your agent is merged with the active entries of every other agent under the same master into one edge allowlist. Adding an address opens the panel to that address across the master; removing yours only drops your own entry from the shared set.

Whether the whitelist is enforced at all is a single master-wide switch controlled at the admin tier — it is not a per-agent or per-brand toggle here. When enforcement is off, everyone reaches the panel as usual; when it’s on, only the WARP baseline plus the merged allowlist get through.

Common tasks

Add an address

1. Click ADD to open the Create drawer.
2. In IP Address, enter a single IPv4 (e.g. 203.0.113.42) or a CIDR range (e.g. 203.0.113.0/24) to cover a whole block.
3. Optionally add a Description so others know what the rule is for.
4. Save. The entry takes effect at the edge right away.

Edit an entry

1. Click the edit (pencil) icon on the row.
2. Only the Description can be changed — the IP / CIDR is fixed.
3. Save.

Note

To change an address, delete the entry and add a new one — the IP / CIDR itself can’t be edited in place.

Delete an entry

1. Click the trash icon on the row and confirm.
2. The rule is removed from the active allowlist immediately.

A delete only removes an entry that is currently active; if nothing active matches, the panel simply reports not found and nothing changes.

Who can do what

Only an owner can add, edit, or delete entries. Staff can view the list but can’t change it.

Related

• IP Lookup
• Staff List
• Roles