Skip to content
Odyssey Wire OW markOWOdysseyWire

Tracing AI through its unexpected turns.

Anthropic adds IP allowlists to Claude Console in beta
Model releases

Anthropic adds IP allowlists to Claude Console in beta

The feature lets organizations block API requests from unauthorized addresses, limiting the reach of leaked keys.

Odyssey Wire Newsroom

Depth
Watch Watch for general availability and expanded service coverage.
16 outlets · newest source 210h ago

Key points

  • Anthropic added IP allowlisting to the Claude Console in beta on November 5, 2026.
  • Organizations can whitelist up to 1,000 IPv4 or IPv6 addresses or CIDR ranges.
  • Requests from addresses not on the list are refused, limiting leaked key usage.

Anthropic updated the Claude API release notes on November 5, 2026, to announce a new IP allowlist feature for the Claude Console. This change adds a network-level control for enterprise customers managing API access.Anthropic lets companies block API requests from unknown IP addresses.Anthropic introduces IP allowlisting in the Claude Console to mitigate API key exposure.

Evidence: reportedClaude API Release Notes page updated: We’ve added the enforcement_status and enforcement_actions fields to user profiles, so you

pagewatch-anthropic

The claim

The release notes state that organizations can now set up an IP allowlist in beta. This feature allows admins to define which IP addresses are permitted to make requests to covered services.

The response

The documentation specifies that requests from addresses not on the allowlist are refused. This mechanism is designed to limit where a leaked API key can be used.

What the evidence means

The feature restricts API access to specific network locations. It does not replace other security measures but adds a layer of control over request origins.

In practice

Enterprise IT buyers can add up to 1,000 IPv4 or IPv6 addresses or CIDR ranges per organization. The feature is in beta, so availability and behavior may change. Users must consult the IP allowlisting documentation to see which services are covered and how to configure the settings. The feature applies to the Claude Console, not necessarily all deployment methods.

Evidence: reportedClaude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. R

pagewatch-anthropic

Why it matters

  • It provides a concrete mitigation for API key leaks by restricting access to known network ranges.
  • It adds a network-level control for organizations with strict compliance requirements.
  • It helps limit the blast radius of compromised credentials to specific geographic or network locations.

Topics: Anthropic, Claude API, security, IP allowlist, beta

Updated

Then / now / next

Then

Organizations relied on API key secrecy for access control.

Now

Anthropic offers IP allowlisting in beta to restrict request origins.

Next

Watch for general availability and expanded service coverage.

Story timeline

  1. Then Organizations relied on API key secrecy for access control.
  2. 05 Nov 2026 My psychophysics as a bilateral cochlear implant user
  3. 05 Nov 2026 No AI agent scores above 12 percent on SemiAnalysis' new real-world work benchmark
  4. 05 Nov 2026 Claude API Release Notes page updated: You can now set up an IP allowlist for your organization in the Claude Console, in beta. R
  5. 05 Nov 2026 Gemini Omni 1.2 Flash: Fast and cost-effective with longer clips
  6. 05 Nov 2026 Transform a quick drawing into a live app with Gemini.
  7. 05 Nov 2026 Android Auto’s latest Gemini failing keeps asking ‘who do you want to call’
  8. 05 Nov 2026 Gemini Omni 1.2 Flash: Fast and cost-effective with longer clips
  9. 05 Nov 2026 Claude API Release Notes page updated: You can now sign a member of your Claude Enterprise (claude.ai) organization out of Claude
  10. 05 Nov 2026 Claude can now analyze your spending with its new Personal Finance tool
  11. 05 Nov 2026 Claude AI can plug directly into your bank account
  12. 05 Nov 2026 Now Claude can help with your finances too
  13. 05 Nov 2026 Claude’s new Personal Finance tool aims to help analyze your spending – read-only, of course
  14. 05 Nov 2026 Winner of the Prix Goncourt literary prize admits to using AI
  15. 05 Nov 2026 Anthropic launches Personal Finance in Claude, letting users connect bank and credit card accounts via Plaid with read-only access to analyze spending trends (Radhika Rajkumar/ZDNET)
  16. 05 Nov 2026 Google's Gemini Omni 1.2 Flash stretches AI video clips to 15 seconds and cuts pricing by 30 percent
  17. 05 Nov 2026 Ads in Chatbots Have Arrived. Here’s What’s Working—and What’s Not
  18. 05 Nov 2026 Google: Schools can keep search while skipping Gemini, but AI search is non-negotiable
  19. 05 Nov 2026 Claude Code sends your email address to websites
  20. 05 Nov 2026 Claude API Release Notes page updated: We’ve added the enforcement_status and enforcement_actions fields to user profiles, so you
  21. 06 Nov 2026 Anthropic News page updated: 284
  22. 06 Nov 2026 Anthropic News page updated: 282
  23. 06 Nov 2026 Artificial Analysis says Inkling 2 Small matches Gemini 3.8 Flash (high) in its index and would be the top open model outside China once its weights are out (Artificial Analysis)
  24. 06 Nov 2026 Google rolls out Gemini Omni 1.2 Flash, which creates clips up to 15 seconds, vs. 10 seconds with Omni 1.1, has better reference adherence, and costs 30% less (Matthias Bastian/The Decoder)
  25. Now Anthropic offers IP allowlisting in beta to restrict request origins.
  26. Next Watch for general availability and expanded service coverage.

The strongest doubt

Counterpoint from the sources

The feature is in beta, so its stability and full scope are not yet finalized.

For readers

Developers

  • Requests from non-listed IPs are refused, which may break integrations if not configured correctly.
  • Support for IPv4, IPv6, and CIDR ranges provides flexibility for complex network setups.

Business

  • This feature helps limit the impact of leaked API keys by restricting access to known networks.
  • It adds a layer of security for organizations with strict compliance requirements.

Policy

  • The feature supports data governance by allowing organizations to control where API requests originate.
  • It provides a mechanism for enforcing network-level access policies.

Ask the article

Local keyword search of this article; no generated answers.

Did this article give you the evidence you needed?

No vote saved on this device.
Your choice stays on this device. No public tally.

Questions readers ask

How many IP addresses can I add to the allowlist?

You can add up to 1,000 IPv4 or IPv6 addresses or CIDR ranges per organization.

Is the IP allowlist feature generally available?

No, it is currently in beta.

What happens if a request comes from an IP not on the list?

The request is refused.

Connected stories

This storyHacker News Thread Discusses FT Report on Anthropic's $900B Spending ClaimsHacker News Thread Discusses FT ChatGPT beta adds verified business agents for US e-commerce firmsChatGPT beta adds verified businSam Bankman-Fried sold Anthropic stake for $1.3B, missing hypothetical $37B gainSam Bankman-Fried sold AnthropicAnthropic IPO filing prompts review of Claude stability and pricing trendsAnthropic IPO filing prompts rev

Reading receipt

  • Anthropic added IP allowlisting to the Claude Console in beta on November 5, 2026.
  • Organizations can whitelist up to 1,000 IPv4 or IPv6 addresses or CIDR ranges.
  • Requests from addresses not on the list are refused, limiting leaked key usage.

Still open: Which specific services are covered by the IP allowlist?

Still open: When will the feature exit beta?

Time spent: 0:00 · Depth: Full

Sources

  1. Anthropic page watch
  2. Google Gemini blog
  3. Google Gemini blog
  4. Google DeepMind
  5. Anthropic page watch
  6. The Decoder

Related stories

Background reading