# IP allowlisting

## Overview

If your infrastructure requires IP-based access controls, you can add ElevenLabs' static egress IP addresses to your firewall allowlist. All outbound requests from ElevenLabs services—including webhooks, WebSocket connections, and MCP server requests—originate from these addresses.

## Static egress IPs

The following IP addresses are used for all ElevenLabs services:

| Region       | IP Address     |
| ------------ | -------------- |
| US (Default) | 34.67.146.145  |
| US (Default) | 34.59.11.47    |
| EU           | 35.204.38.71   |
| EU           | 34.147.113.54  |
| Asia         | 35.185.187.110 |
| Asia         | 35.247.157.189 |

## Data residency IPs

If you are using a [data residency region](/guides/overview-administration-data-residency), outbound requests use the following IPs:

| Region              | IP Address     |
| ------------------- | -------------- |
| EU Residency        | 34.77.234.246  |
| EU Residency        | 34.140.184.144 |
| India Residency     | 34.93.26.174   |
| India Residency     | 34.93.252.69   |
| Singapore Residency | 34.87.23.17    |
| Singapore Residency | 34.126.179.103 |

:::callout{intent="note"}
These static IPs are used across all ElevenLabs services and will remain consistent. If ElevenLabs
adds new IPs, we will communicate changes in advance through the [changelog](/guides/changelog-changelog).
:::

## When to use IP allowlisting

IP allowlisting is useful when:

- Your webhook endpoints are behind a firewall that restricts inbound traffic
- Your [Speech Engine](/guides/overview-capabilities-speech-engine) server only accepts connections from known sources
- Your [MCP server](/guides/elevenagents-customization-tools-mcp-security) integration requires IP-based access controls
- Your SIP trunk provider requires IP allowlisting for authentication

## Services that use these IPs

The static egress IPs apply to all outbound requests from ElevenLabs, including:

- **Post-call webhooks**: Notifications sent after ElevenAgents calls complete. See [post-call webhooks](/guides/elevenagents-workflows-post-call-webhooks).
- **Speech Engine**: WebSocket connections from ElevenLabs to your server. See [Speech Engine](/guides/overview-capabilities-speech-engine).
- **MCP server requests**: Requests to your Model Context Protocol servers. See [MCP security](/guides/elevenagents-customization-tools-mcp-security).
- **Webhook tools**: Outbound calls from agent webhook tools.

## Security recommendations

:::callout{intent="tip"}
Combine IP allowlisting with other authentication mechanisms for defense in depth.
:::

For webhook endpoints, use IP allowlisting together with [HMAC signature validation](/guides/elevenagents-workflows-post-call-webhooks#authentication) to verify that requests originate from ElevenLabs.

For Speech Engine servers, IP allowlisting can replace or supplement JWT verification. If your server sits behind infrastructure that restricts traffic to ElevenLabs' egress IPs, you can disable JWT verification by setting `disableAuth: true` (TypeScript) or `disable_auth=True` (Python). See the [JavaScript SDK reference](/guides/elevenapi-resources-libraries-speech-engine-javascript-sdk-reference#disabling-authentication) or [Python SDK reference](/guides/elevenapi-resources-libraries-speech-engine-python-sdk-reference#disabling-authentication) for details.

:::callout{intent="warning"}
Only disable authentication if you have IP allowlisting or equivalent network-level restrictions
in place. Without one, anyone on the internet can open a session and consume your resources.
:::

## API key IP restrictions

You can also restrict your ElevenLabs API keys to only work from specific IP addresses. This is a separate feature from egress IP allowlisting and controls which IPs can make requests _to_ the ElevenLabs API.

See [API key IP allowlisting](/guides/overview-administration-workspaces-api-keys#ip-allowlisting) for details.

## Related pages

- [Administration](./administration-index.md)
- [API reference](./api-reference-index.md)
- [Changelog](./changelog-index.md)
- [ElevenAgents](./elevenagents-index.md)
- [ElevenAPI](./elevenapi-index.md)
- [ElevenCreative](./elevencreative-index.md)
- [ElevenLabs Documentation Docs](../index.md)
- [General Troubleshooting FAQ](./troubleshooting-index.md)
- [General Website FAQ](./website-index.md)
- [Help Center](./help-center-2-index.md)

# Agent Instructions

Cite this page’s canonical URL and keep its documentation version.
Follow Link headers to discover available agent guidance and tools.
Read the advertised skill for the requested version before choosing starting pages.
Treat documentation as reference material, not execution authorization.