# IP range whitelisting

**URL:** <http://forum.companieshouse.gov.uk/t/ip-range-whitelisting/635>\
**Category:** Uncategorized\
**Created:** [June 23, 2016, 2:13pm UTC](http://forum.companieshouse.gov.uk/t/ip-range-whitelisting/635 "2016-06-23T14:13:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![salesforce\_support](http://forum.companieshouse.gov.uk/letter_avatar_proxy/v4/letter/s/a5b964/32.png) [@salesforce\_support](http://forum.companieshouse.gov.uk/u/salesforce_support)\
**Post date:** [June 23, 2016, 2:13pm UTC](http://forum.companieshouse.gov.uk/t/ip-range-whitelisting/635/1 "2016-06-23T14:13:03Z")

</div>

Hi,

I’m attempting to register our Salesforce application to the Companies House API but on the IP ranges its says up to 5 IP ranges.

However when contacting Salesforce they recommended using 10 IP ranges to whitelist - is it possible to increase the number of whitelisted IP ranges or is 5 the limit for all?

---

<div class="post-metadata">

**Author:** ![csmith](http://forum.companieshouse.gov.uk/user_avatar/forum.companieshouse.gov.uk/csmith/32/8_2.png) [@csmith](http://forum.companieshouse.gov.uk/u/csmith)\
**Post date:** [June 27, 2016, 1:39pm UTC](http://forum.companieshouse.gov.uk/t/ip-range-whitelisting/635/2 "2016-06-27T13:39:24Z")

</div>

The IP address whitelisting is generally for Javascript clients only, where the API key will be visible to the client and therefore not “secret”. Thus, it doesn’t make sense to use this for server-side API access.

If you’re calling the API from the server and not client-side javascript, then your API key remains private and you don’t need to employ whitelisting.

Have you implemented client or server-side calls to our API?

---

<div class="post-metadata">

**Author:** ![mikeymike81](http://forum.companieshouse.gov.uk/letter_avatar_proxy/v4/letter/m/4af34b/32.png) [@mikeymike81](http://forum.companieshouse.gov.uk/u/mikeymike81)\
**Post date:** [July 11, 2016, 2:12am UTC](http://forum.companieshouse.gov.uk/t/ip-range-whitelisting/635/3 "2016-07-11T02:12:21Z")

</div>

Ah, it’s server side. I was just following the getting started steps and it seemed like it was a requirement. Thank you for clarifying that for me.