Account
PUT /v1/key/allowed-ips — Restrict a Key to Your Servers
Bind an API key to specific IP addresses or CIDR ranges so a leaked key is useless from anywhere else.
PUT
Restrict this key to your own addresses
Binds the key to the addresses your servers actually call from. Requests from anywhere else are refused with
403 ip_not_allowed. An empty array clears the restriction.
This is the cheapest protection against the most common way keys leak: a log line, a screenshot, a committed .env.
The same setting is available in the account panel at csboard.com/profile?tab=api. Neither is the only way in.
Authentication required. Send your key as Authorization: Bearer csb_pub_....Authorizations
Send your key as a Bearer token on every request: Authorization: Bearer csb_pub_.... Generate keys in your CSBoard profile.
Body
application/json
Addresses or CIDR ranges. Empty clears the restriction. Max 20.
Response
Applied.