Can a key restrict IP access?

Yes. API keys support IP whitelists and IP blacklists; key expiry and rolling spend limits are configured separately in the console.

Steps

1. Record the service egress IP or CIDR.
2. Configure the IP whitelist and IP blacklist as needed.
3. Send verification requests from an allowed and a denied network.

Limits and exceptions

The blacklist denies first; when a whitelist is configured, unmatched IPs are denied. NAT, proxies, and dynamic egress can change the address seen by the service.