ip_not_allowed

The token is valid, but it has an IP allowlist and this request came from an address outside it. The message never shows the allowlist.

HTTP 403. Nothing reached the broker.

Likely causes:

• The call came from a server or network that is not on the token’s allowlist.
• Your public IP changed (a new office line, VPN, NAT or cloud egress address).
• The allowlist was narrowed; open WebSockets using the token are closed (code 1008) at the next re-check.

What to do: Call from an address on the allowlist, or create a token whose allowlist includes this address. Retrying from the same address will not help.

Retry: No. The same request gets the same answer; change something first.

Listed under Keys, tokens and permissions in Errors. Send the error’s requestId to support and we can find the request.