Skip to main content
Version: 2019-05-29 (Current)

IP Addresses

Depending on your environment, you may need to configure your firewall or network settings to allow Omise's fixed IP addresses.

APIโ€‹

The domain api.omise.co resolves to the following IP addresses:

IP Address
76.223.19.23
13.248.150.88

If your server makes outbound API requests to Omise, ensure these IPs are accessible from your network.

Webhooksโ€‹

Webhook deliveries originate from the following IP addresses:

IP Address
54.169.118.227
52.74.199.175
18.139.13.19

If you need to whitelist incoming webhook requests, add these IP addresses to your firewall rules.

Important

IP addresses may change. We recommend using the downloadable JSON file for automated updates rather than hardcoding these values.

Downloading This Listโ€‹

For automated configuration, you can download the current list of IP addresses in JSON format:

curl https://cdn.omise.co/ips.json

Example response:

{
  "api": [
    "76.223.19.23",
    "13.248.150.88"
  ],
  "webhooks": [
    "54.169.118.227",
    "52.74.199.175",
    "18.139.13.19"
  ]
}

Use this endpoint to periodically sync your firewall rules with the latest IP addresses.

FAQโ€‹

Do I need to whitelist these IP addresses?

Only if your network has strict outbound or inbound firewall rules. Most cloud environments allow outbound HTTPS traffic by default. You may need to whitelist webhook IPs if your server blocks incoming requests from unknown sources.

How often do the IP addresses change?

IP addresses rarely change, but they can be updated for infrastructure improvements. We recommend using the JSON endpoint to keep your configuration current.

Can I use domain-based filtering instead of IP whitelisting?

Yes, for API requests you can allow outbound traffic to api.omise.co and vault.omise.co. For webhooks, IP whitelisting is more reliable since the source domain isn't configurable.

Are these IPs the same for test and live modes?

Yes, the same IP addresses are used for both test and live mode requests.