# Add an authorized IP within verified scope `POST /account/api/v1/proxies/authorized-ips/add` ## Authorization `Authorization: Bearer YOUR_ARNPROXY_API_KEY` `Accept: application/json` Required permission: `proxy_management` `Content-Type: application/json` `Idempotency-Key` · 16–100 letters, digits, _ or -. Persist and reuse the same value for the same operation. ## Parameters | Name | Type | Required / Conditional | Default | Description | |---|---|---|---|---| | `Idempotency-Key` (header) | string | Required | — | 16–100 letters/digits/_/-. Keep the same value for the operation/status; do not reuse with a different body. | | `proxy_id` (body) | integer | Required | — | Owned active proxy record ID; 1–2147483647. | | `ip` (body) | string | Required | — | Public IP address. Check authorized_ip_families in the proxy_access response for supported IP families. Removal is limited to your own API-added IP grants. | | `expected_revision` (body) | string | Required | — | revision from this operation’s scope/settings read: 64 lowercase hex characters. | | `terms` (body) | boolean | Required | — | Must be the JSON boolean true for explicit approval, not the string "true". | ## Request body Replace YOUR_/FROM_ placeholders with values from the relevant catalog, quote or scope. Examples leave consent false; only approve a real operation intentionally. ```json { "proxy_id": "YOUR_PROXY_ID", "ip": "YOUR_PUBLIC_IPV4", "expected_revision": "FROM_SCOPE_REVISION", "terms": false } ``` ## Request example ### curl ```curl printf 'Authorization: Bearer %s\n' "$ARNPROXY_API_KEY" | curl --silent --show-error --header @- \ --header 'Accept: application/json' \ --connect-timeout 10 --max-time 30 \ --header 'Idempotency-Key: YOUR_SAVED_OPERATION_KEY' \ --request POST --header 'Content-Type: application/json' \ --data-binary @request.json \ 'https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add' ``` ### python ```python import os, requests headers = {"Authorization": "Bearer " + os.environ["ARNPROXY_API_KEY"]} headers["Idempotency-Key"] = "YOUR_SAVED_OPERATION_KEY" import json with open("request.json", encoding="utf-8") as f: payload = json.load(f) response = requests.post( "https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add", headers=headers, json=payload, timeout=(10, 30), allow_redirects=False ) print(response.status_code, response.text) # No automatic write retry. ``` ### javascript ```javascript const headers = { Authorization: `Bearer ${process.env.ARNPROXY_API_KEY}` }; headers['Idempotency-Key'] = 'YOUR_SAVED_OPERATION_KEY'; const { readFile } = await import('node:fs/promises'); headers['Content-Type'] = 'application/json'; const body = await readFile('request.json', 'utf8'); const response = await fetch("https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add", { method: 'POST', headers, redirect: 'error', signal: AbortSignal.timeout(30000), body }); console.log(response.status, await response.text()); // A write timeout is ambiguous; query its saved operation. ``` ### php ```php true, CURLOPT_HTTPHEADER => $headers, CURLOPT_FOLLOWLOCATION => false, CURLOPT_SSL_VERIFYPEER => true, CURLOPT_SSL_VERIFYHOST => 2, CURLOPT_CONNECTTIMEOUT => 10, CURLOPT_TIMEOUT => 30, CURLOPT_POST => true, CURLOPT_POSTFIELDS => file_get_contents('request.json'), ]); $result = curl_exec($ch); if ($result === false) { // Do not repeat a write; use the original operation key. throw new RuntimeException('Transport result unknown'); } echo curl_getinfo($ch, CURLINFO_HTTP_CODE).PHP_EOL.$result; curl_close($ch); ``` ### go ```go package main import ( "fmt" "io" "net/http" "os" "time" ) func main() { client := &http.Client{Timeout: 30*time.Second, CheckRedirect: func(req *http.Request, via []*http.Request) error { return http.ErrUseLastResponse }} var body io.Reader file, err := os.Open("request.json"); if err != nil { panic(err) } defer file.Close(); body = file req, err := http.NewRequest("POST", "https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add", body) if err != nil { panic(err) } req.Header.Set("Authorization", "Bearer "+os.Getenv("ARNPROXY_API_KEY")) req.Header.Set("Idempotency-Key", "YOUR_SAVED_OPERATION_KEY") req.Header.Set("Content-Type", "application/json") res, err := client.Do(req); if err != nil { panic(err) } defer res.Body.Close() data, err := io.ReadAll(res.Body); if err != nil { panic(err) } fmt.Println(res.StatusCode, string(data)) } ``` ### csharp ```csharp using System; using System.IO; using System.Net.Http; using System.Net.Http.Headers; using System.Text; using var handler = new HttpClientHandler { AllowAutoRedirect = false }; using var client = new HttpClient(handler) { Timeout = TimeSpan.FromSeconds(30) }; using var request = new HttpRequestMessage(HttpMethod.Post, "https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add"); request.Headers.Authorization = new AuthenticationHeaderValue( "Bearer", Environment.GetEnvironmentVariable("ARNPROXY_API_KEY")); request.Headers.Add("Idempotency-Key", "YOUR_SAVED_OPERATION_KEY"); request.Content = new StringContent( await File.ReadAllTextAsync("request.json"), Encoding.UTF8, "application/json"); using var response = await client.SendAsync(request); Console.WriteLine((int)response.StatusCode); Console.WriteLine(await response.Content.ReadAsStringAsync()); // Never automatically retry an ambiguous write. ``` ### java ```java import java.net.URI; import java.net.http.*; import java.nio.charset.StandardCharsets; import java.nio.file.*; // Inside your application method: var client = HttpClient.newHttpClient(); var request = HttpRequest.newBuilder(URI.create("https://www.arnproxy.com/account/api/v1/proxies/authorized-ips/add")) .header("Authorization", "Bearer " + System.getenv("ARNPROXY_API_KEY")) .header("Accept", "application/json") .header("Idempotency-Key", System.getenv("ARNPROXY_OPERATION_KEY")) .header("Content-Type", "application/json") .POST(HttpRequest.BodyPublishers.ofString( Files.readString(Path.of("request.json"), StandardCharsets.UTF_8))) .build(); var response = client.send(request, HttpResponse.BodyHandlers.ofString()); System.out.println(response.statusCode()); ``` ## Responses · HTTP 200, 202 ```json { "ok": true, "data": { "state": "completed", "action": "ip_add", "proxy_ids": [ 12345 ], "reason_code": null, "replayed": false, "provider_write_steps_sent": 1, "resume_available": false, "primary_credentials_locked": true, "credentials_returned": false, "balance_changed": false, "proxy_expiry_changed": false, "authorization_scope": "upstream_order", "shared_order_effects_accepted": true, "grant_state": "active" }, "meta": { "request_id": "000000000000000000000001", "phase": "public_v1", "source": "arnproxy_records" } } ``` | Name | Type | Conditional | Description | |---|---|---|---| | `ok` | boolean | — | Success envelope flag; on false inspect error.code. | | `data` | object | — | Operation-specific result; examples are illustrative and synthetic. | | `data.state` | string | — | Record/operation state. accepted is not delivery; completed is not a connection test. | | `data.action` | string | — | Operation-specific action value; preserve its demonstrated type and consult the behavior notes. | | `data.proxy_ids` | array | — | Proxy IDs in the scope visible to this account. | | `data.proxy_ids[]` | integer | — | Proxy IDs in the scope visible to this account. | | `data.reason_code` | string|null | — | Fixed reason code or null, never raw provider error text. | | `data.replayed` | boolean | — | Saved result for the same operation was returned, not proof of a new debit/action. | | `data.provider_write_steps_sent` | integer | — | Operation-specific provider write steps sent value; preserve its demonstrated type and consult the behavior notes. | | `data.resume_available` | boolean | — | Explicit resume availability for an unsent step; do not auto-retry when false. | | `data.primary_credentials_locked` | boolean | — | Operation-specific primary credentials locked value; preserve its demonstrated type and consult the behavior notes. | | `data.credentials_returned` | boolean | — | Operation-specific credentials returned value; preserve its demonstrated type and consult the behavior notes. | | `data.balance_changed` | boolean | — | Reported effect of this operation; an automatic-renewal setting can cause future separate debits. | | `data.proxy_expiry_changed` | boolean | — | Reported effect of this operation; an automatic-renewal setting can cause future separate debits. | | `data.authorization_scope` | string | — | Authorization scope. Order/package operations may affect other assignments. | | `data.shared_order_effects_accepted` | boolean | — | Operation-specific shared order effects accepted value; preserve its demonstrated type and consult the behavior notes. | | `data.grant_state` | string | — | IP-grant record state. A removal operation’s own grant_state can be none; the parent grant is revoked separately. | | `meta` | object | — | Request correlation and data-source metadata. | | `meta.request_id` | string | — | This HTTP request’s correlation ID, not an operation key or order ID. | | `meta.phase` | string | — | Operation-specific phase value; preserve its demonstrated type and consult the behavior notes. | | `meta.source` | string | — | Data source; local records and a live provider lookup are different evidence. | ## Behavior & important notes - An action may apply to an entire authorization group, such as an order or package, rather than only the selected proxy. Review proxy_ids, authorization_scope and may_affect_other_proxies before continuing. Obtain a new revision if the scope changes. - Removal requires this account’s own API-added grant; administrator or other-user IP grants are not removable. IP grants are covered by separate expiry checks. - A timeout/5xx is not proof that a write failed. Use the original Idempotency-Key with its status resource. Do not retry under a new key; GET does not resend the change. - The allowlist in My account → API controls which addresses may use the API key and is managed on the account page. Proxy authorized-IP operations control which addresses may connect to the proxy. These settings do not modify one another. Authentication and validation may reject a request before execution. Consult the error reference and retain request_id when contacting support. Never send keys or passwords. [Errors & limits](https://docs.arnproxy.com/api-v1/errors) [Follow the same operation: Reconcile the same operation without resending writes](https://docs.arnproxy.com/api-v1/proxies/access/status)