Banked's IP whitelisting, when enabled, grants API call access to a predefined list of trusted IP addresses, denying all others.
Our IP whitelisting configuration options includes specifying one or more IP addresses and subnet mask ranges for each of the IP address specified.
When this feature is turned on, if an API call is made from a source IP address which hasn't been whitelisted then you and you receive this HTTP 401 error response:
json
{
"error": "invalid_client",
"error_description": "IP address not in range"
}