DashboardSettings
Security Settings
Configure IP whitelist and CORS allowed origins
Navigate to Settings → Security to configure network-level security.
IP Whitelist
Restrict MQTT connections to specific IP addresses or CIDR ranges.
- Toggle IP Whitelist on
- Enter an IP address or CIDR range (e.g.,
203.0.113.0/24) - Click Add
- Repeat for additional IPs
To remove an IP, click the X next to it.
Enabling IP whitelist with no entries blocks all connections. Always add at least one IP before enabling.
Allowed Origins (CORS)
Configure which domains can make token exchange requests from the browser. Required when using Auth Providers from a frontend application.
- Enter the origin URL (e.g.,
https://myapp.com) - Click Add
- Repeat for additional origins
CORS origins are only required for browser-based token exchange. Server-to-server requests (using secret API keys) are not affected by CORS.