# ip_not_allowed

> The token is valid, but it has an IP allowlist and this request came from an address outside it. The message never shows the allowlist.

Source: https://tickwire.io/docs/errors/ip_not_allowed/

HTTP 403. Nothing reached the broker.

**Likely causes:**

- The call came from a server or network that is not on the token's allowlist.
- Your public IP changed (a new office line, VPN, NAT or cloud egress address).
- The allowlist was narrowed; open WebSockets using the token are closed (code 1008) at the next re-check.

**What to do:** Call from an address on the allowlist, or create a token whose allowlist includes this address. Retrying from the same address will not help.

**Retry:** No. The same request gets the same answer; change something first.

Listed under [Keys, tokens and permissions](https://tickwire.io/docs/errors/#keys-tokens-and-permissions) in [Errors](https://tickwire.io/docs/errors/). Send the error's `requestId` to support and we can find the request.