# Authorized IP list for API call

**URL:** <https://community.hubspot.com/t/authorized-ip-list-for-api-call/11477>\
**Category:** APIs & Integrations\
**Tags:** events\
**Created:** [October 3, 2018, 3:26pm UTC](https://community.hubspot.com/t/authorized-ip-list-for-api-call/11477 "2018-10-03T15:26:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/system/32/124_2.png) [@system](https://community.hubspot.com/u/system)\
**Post date:** [October 3, 2018, 3:26pm UTC](https://community.hubspot.com/t/authorized-ip-list-for-api-call/11477/1 "2018-10-03T15:26:03Z")

</div>

Hi,  
Is there a way to define a list of authorized IP that can call HTTP request of the API ?  
I would like to prevent someone using my api key to call event outside from my website.

Thank you

---

<div class="post-metadata">

**Author:** ![IsaacTakushi](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/isaactakushi/32/70387_2.png) [@IsaacTakushi](https://community.hubspot.com/u/IsaacTakushi)\
**Post date:** [October 3, 2018, 8:43pm UTC](https://community.hubspot.com/t/authorized-ip-list-for-api-call/11477/2 "2018-10-03T20:43:54Z")

</div>

Hi [@morganbigot](https://community.hubspot.com/u/morganbigot),

This isn’t currently possible. HubSpot API keys allow unrestricted access to an account.

If you’re concerned about security or wish to impose greater restrictions on usage, I recommend authenticating requests with [OAuth](https://developers.hubspot.com/docs/methods/oauth2/oauth2-overview).

---

<div class="post-metadata">

**Author:** ![system](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/system/32/124_2.png) [@system](https://community.hubspot.com/u/system)\
**Post date:** [October 4, 2018, 7:24am UTC](https://community.hubspot.com/t/authorized-ip-list-for-api-call/11477/3 "2018-10-04T07:24:34Z")

</div>

Thank you for your response.  
Regards