# `auth.ip_not_allowed` — IP address not allowed

**HTTP status:** 403  
**Retryable:** no — change the request or the flow first

## When it happens

The key has an IP allow-list and the request came from an address that is not on it.

## What to do

Call from an allowed server, or add this server's public IP (or CIDR range) to the key's allow-list in the panel.

## Example response

```json
{
  "type": "https://quickota.com/developers/errors/auth.ip_not_allowed",
  "title": "IP address not allowed",
  "status": 403,
  "code": "auth.ip_not_allowed",
  "detail": "The key has an IP allow-list and the request came from an address that is not on it.",
  "suggestion": "Call from an allowed server, or add this server\u0027s public IP (or CIDR range) to the key\u0027s allow-list in the panel.",
  "retryable": false,
  "requestId": "req_7f3a2c9e41d0b8a6c5e21f90"
}
```

See [Errors](https://quickota.com/developers/guides/errors) for how to handle errors in general.