Replace an API key's IP allowlist
Replaces the source-IP allowlist on one key. Send allowed_ips as an array of IPs or CIDR ranges (at most 50 entries); an empty array or null clears the list and makes the key unrestricted. Each entry is validated as IP-or-CIDR, and malformed input returns 422. The list replaces, not merges — send the complete set. Once enforced, requests presenting the key from outside the list are rejected. Returns the stored list. Owner, admin or developer.
Authorizations
Dashboard JWT token from Clerk
Headers
Sandbox opt-in for Clerk-session-authenticated requests. Set to true to route the call through the test-mode pipeline: no real provider delivery, no credits deducted, response meta.test_mode: true. Ignored for live API keys (dv_live_sk_*) — server-to-server clients must use a test-prefixed key (dv_test_sk_*) to exercise sandbox. Test-prefixed keys unconditionally enable sandbox regardless of this header.
true, false